"No Symantec protection technologies are installed" on Windows 7

[Migration User]

Hello.

We are currently testing some Windows 7 deployment but we have some problems with SEP.

We currently use Windows Xp on all clients and SEP 11.0.5 works fine. But when we install SEP on the Windows 7 machines it seems to work fine but it list "No Symantec protection technologies are installed".

We use the same installer for Xp and 7.

It is possible make it work by modifying the installation in Add/Remove programs. But we have alot of clients so that is not an option :-)

Any suggestions?

Thanks

[Migration User]

See whether this link can help you

No Symantec Protection technologies are Installed"

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009042115381848 

[Migration User]

I have seen the first link before. The registry seems fine.

The second link is dead

[pete]

try scanning the system with the NSS tool from Symantec and then try installling the product

[Migration User]

Where do i get the NSS tool?
I can't seem to find it anywhere.

[Migration User]

ftp://ftp.symantec.com/misc/tools/nss/NortonSecurityScan.exe

[Rafeeq]

remove SEP
reboot win7 box
right click on setup.exe
select run as admin
check the progress.

[Migration User]

Just did at full system scan and there were no security risks detected.

[Migration User]

Any suggestions?

I'm kinda stuck here. Google isn't much help here.

[Migration User]

 I'm having the same issues with my windows 7 laptops here. Version 11.0.5002. I removed and reinstalled SEP, checked the registry permissions too. The machines I'm having the issue are not part of any GPO (as I've seen some other posts mentioning this as an issue). On the logs I can see the machine is connected to SEP server and weekly scans are running. 

 

[Migration User]

Great to know im not the only one having this problem. If you happen to find a solution please write here :-)

[pete]

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009042115381848

is the second link sent by AravindKM

[Migration User]

Thanks. But that's the same as the first link he sent.

[Migration User]

Can you double check whether  you are having any group policy which will affect symantec services... 

[Migration User]

With all GPO's disabled i get the same result. And i tripple checked the registry for the keys mentionened in the link you sent.

[Rafeeq]

try this

go to start run & type rsop.msc- it will open a new window.
--> Under computer configrations go to windows setting-- then security setting & click on the system services.. On the right hand side find SEP serivices & check if there is any thing under stratup.

[Migration User]

There are four Symantec services:

Symantec Event Manager
Symantec Managament Client
Symantec Network Access Control
Symantec Settings Manager

There is nothing defined on startup on any of them.

[pete]

Symantec Endpoint protection is not there , that means rtvscan.exe is not installed. Hence the issue.

[Migration User]

Go to services and see whether  Symantec Endpoint protection  service is started. If not start the service and make the startup type to automatic..

[Migration User]

Any suggestions to why rtvscan.exe is not installed?
When i use the same installer on Windows Xp rtvscan.exe is installed fine.

When i modify the installation in windows 7 it show that all the modules are not installed.
If i check them for installation everything works fine.

[Rafeeq]

export new package and run the install, seems like the installer not able to identify what to install and what to skip. ;) 

[Migration User]

Check the SETAID.INI file entries (in the installation package)
Refer below doc
MSI command line reference for Symantec Endpoint Protection 11.0
 

[Migration User]

I dont have access to our Symantec server atm. The guy with the password is on vacation this week.

Here is the setAid.ini from the install package i use:

; NOTE: Do not edit the config below
[PREDEFINED_SMC_CONFIG]
AppType=105
VendorID=4096
PlatformType=WIN32BIT

; User configureable options
PackageChecksum=fcb6f026b4c552dc83beee5fcc739ded
[CUSTOM_SMC_CONFIG]
InstallNewInstanceOnly=0
InstallUserInterfaceLevel=s
KeepPreviousSetting=0
InstallationLogDir=%TEMP%\SEP_INST.LOG
DestinationDirectory=
LaunchIt=1
AddProgramIntoStartMenu=1
UIRebootMode=3

[LU_CONFIG]
ServerProduct=SESM AntiVirus Client Win32
ServerLanguage=English
ServerVersion=11.0.5002
SequenceNumber=0
ServerMoniker={2E96287D-0A02-8787-00F6-AC0B723729F0}
ClientProduct=SESC AntiVirus Client Win32
ClientLanguage=English
ClientVersion=11.0.5002
ClientMoniker={C67CD121-0A02-8787-00F6-AC0B2844D2EA}
SequenceTag=PATCH
ShortName=sesmAvClient32en_MR5
DisplayName=Symantec Endpoint Protection Win32 11.0.5002.333 (English)
CONNECT_LU_SERVER=1

[FEATURE_SELECTION]
SAVMain=1
EMailTools=1
OutlookSnapin=1
NotesSnapin=0
Pop3Smtp=0
ITPMain=0
Firewall=0
PTPMain=0
COHMain=0
DCMain=0

[Migration User]

 According to setAid.ini   AntiVirus and AntiSpyware Protection and  Antivirus Email Protection should get installed.The problem may be with the user rights which you are using for installation or the UAC I believe.
Any way try to install AntiVirus and AntiSpyware Protection from add/remove programs and see what is the result.

[Rafeeq]

can try right click on setup.exe select run as admin.

[Migration User]

If i modify the installation in add/remove programs it works fine.

I have tried to run setup.exe as administrator. I also tried logging in with the local administrator account. That made no difference.

[Migration User]

Export a new package and try.. 

[Migration User]

I will do that at soon as the IT-boss gets back from vacation :)

Thanks for the help so far everyone. Much apreciated.

[Migration User]

 I have Symantec installed and the problem is here. Under the RSOP i see Symantec Endpoint Protection, Event Manager, Management Client, NAC and all are set as "not defined" "Not defined". Do you have any clues on next steps to try solving this issue? thanks, leo

[Migration User]

Hi again.

We tried to export a new package. And it made no difference.

It's frustrating because it's the last step before we can start deploying windows 7.

Anyone who has suggestions?

[Migration User]

Do you have any previous installation of any antivirus in these PCs? I mean old version of SEP,SAV etc...

[Migration User]

No. Its a clean Windows 7 Enterprise

[Rafeeq]

an IMAGE?  

[Migration User]

Yes it's an image deployed by SCCM

[Migration User]

Configuring Symantec Endpoint Protection client for deployment as part of a drive image

 

[Migration User]

It's not a drive image.

It's installed by SCCM via task sequences.

So it's basically the same as installing from a dvd.

I also install Symantec manually after the OS is installed

[Migration User]

Could potentially be a problem with the WMI repository. Try the following (on a test machine of course :) ):

I think there is a vbs script for accomplishing the same thing on Win XP but I don't have it and don't know if it will work on windows 7.

First backup the repository as per this MS article:

http://technet.microsoft.com/en-us/library/cc731460.aspx

After that reset it with wmimgmt /resetrepository or do it manually:

Manual Steps:
Stop the Windows Management Instrumentation Service and it's dependencies.
As an Administrator rename the folder Repository in C:\Windows\System32\Wbem\
Start the Windows Management Instrumentation Service.
Reinstall or do a repair install of SEP and check the Security/Action Center.

Let us know if that works.

[Migration User]

Unfortunately that made no difference at all.

But as always if i do a repair install of SEP all the components are unchecked. If i check them and run the install it works fine.

Could it be some isues with the Danish version of Windows 7 that we use?

[Migration User]

You have to use Spanish version of SEP in Spanish version of windows.It can be downloaded from https://fileconnect.symantec.com/ 

[Migration User]

It's Danish not Spanish :)

The link is not working

[Migration User]

I thought it is a typo.
Can you double check whether you are selected the right language in the regional and language option in control panel?
 

[Rafeeq]

in windows change the regional settings to the one you use, then run the install.
 

[Migration User]

All the settings are correct.

I tried changing the settings to English (USA) and did a reinstall.. That made no difference.

[Migration User]

Mine is English and i have the same problem. 

[Migration User]

Me neither.
Guess i'm just desperate du solve this problem :)

If anyone has any suggestions to this problem please don't hesitate to write.

[Migration User]

We have also had this issue and the solution provided in Document ID: 2009042115381848 brought no effect.

We found out that the affected Machines are all in OU where "Trusted Publisher Lockdown" in the Group Policy is activated.
Please check if your machines have also this option active in the Group Policy.
If so, there are two ways to solve the Problem:

1. Disable "Trusted Publisher Lockdown" in Policy
or
2. Import the Symantec Digital Signature to Trusted Publisher Store (IMPORTANT: Computer Store!)

(Digital Signature can be found (and saved) in properties of each symantec executable, for example rtvscan.exe)

Regards