Endpoint install fails. log attached - Updated Thread

[Migration User]

had some trouble with my other post, im hoping this one works.  we have 2 servers the Endpoint install fails on.  It gets to "configuring" and rolls itself back.  any ideas?

Attachment(s)

ErrorLog.txt   1.70 MB 1 version

[David-Z]

Hey Tdean,

I took a look through the log and found this:

MSI (s) (28:A4) [17:31:29:132]: Executing op: CustomActionSchedule(Action=InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644,ActionType=3329,Source=BinaryData,Target=UnInstallLiveUpdate,CustomActionData=C:\Temp\WAGSHIVF\LiveUpdate\lucheck.exe)
MSI (s) (28:A4) [17:31:29:132]: Executing op: ActionStart(Name=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,,)
MSI (s) (28:A4) [17:31:29:132]: Executing op: CustomActionSchedule(Action=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,ActionType=3073,Source=BinaryData,Target=InstallLiveUpdate,CustomActionData=C:\Temp\WAGSHIVF\LiveUpdate\lucheck.exe)
MSI (s) (28:58) [17:31:29:132]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI172.tmp, Entrypoint: InstallLiveUpdate
LUCA: InstallLiveUpdate enter.
LUCA: C:\Temp\WAGSHIVF\LiveUpdate\lucheck.exe
LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206
MSI (s) (28:A4) [17:31:35:960]: User policy value 'DisableRollback' is 0
MSI (s) (28:A4) [17:31:35:960]: Machine policy value 'DisableRollback' is 0
Action ended 17:31:35: InstallFinalize. Return value 3.

 

It would appear that the install failed while trying to install Liveupdate and verify that it was working properly. You might want to try reinstalling Liveupdate beforehand to see if it is able to uninstall/install successfully. Then try the install of the SEP client again.

The version of Liveupdate that SEP uses is Liveupdate 3.3. If you want to try and install it stand-alone first you can download a copy of LUSetup.exe from here: http://www.symantec.com/techsupp/home_homeoffice/products/lu/lu/files.html

If the client install fails again then please post the results of LUResult.txt which can be found at C:\Program Files\Symantec\Liveupdate\. There might be a hint there as to why Lucheck failed.

Hope that helps!

[Migration User]

that worked... at least on one of them.  i'll see about the other.  thank you!

[Migration User]

Hi,

I have the same problem on one server here.

LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206

I tried to install and uninstall LiveUpdate 3.3.
These install and uninstall works fine, but the problem with the EndPoint remains the same.

Are there any other option for me?

Thanks,

[Migration User]

What OS are you trying to install on?  Is the install running in an elevated context?

[Migration User]

Hi Andre,

If it is not too much trouble as well please attach the full log file as well. Thanks.
Grant-

[Migration User]

The OS is a Windows 2003 Standard Server 32bit.

The Log is too long, 19k lines, how do i attach it here?

Thanks again.

[Migration User]

Hi,

In the log file, look for "value 3" (without quotes).

And paste 6 lines above and below the value 3 in the comment.

That should help us have a brief idea about the rollback.

.......Barkha

[Migration User]

Now, 6 linesbefore and 6 lines after the value 3:

MSI (s) (30:D0) [16:09:37:328]: Invoking remote custom action. DLL: C:\WINNT\Installer\MSI147.tmp, Entrypoint: InstallLiveUpdate
LUCA: InstallLiveUpdate enter.
LUCA: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\WPFVEADR\LiveUpdate\lucheck.exe
LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206
MSI (s) (30:00) [16:10:28:187]: User policy value 'DisableRollback' is 0
MSI (s) (30:00) [16:10:28:187]: Machine policy value 'DisableRollback' is 0
Ação concluída 16:10:28: InstallFinalize. Valor de retorno 3.
MSI (s) (30:00) [16:10:28:250]: Executing op: Header(Signature=1397708873,Version=301,Timestamp=983466278,LangId=1046,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
MSI (s) (30:00) [16:10:28:250]: Executing op: DialogInfo(Type=0,Argument=1046)
MSI (s) (30:00) [16:10:28:250]: Executing op: DialogInfo(Type=1,Argument=Symantec Endpoint Protection)
MSI (s) (30:00) [16:10:28:250]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Repetindo a ação:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removendo arquivos de backup,CleanupTemplate=Arquivo: [1])
MSI (s) (30:00) [16:10:28:250]: Executing op: ActionStart(Name=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,,)
MSI (s) (30:00) [16:10:28:250]: Executing op: ProductInfo(ProductKey={C1B0BDC8-0624-4036-90D1-F7DF0EE8C96D},ProductName=Symantec Endpoint Protection,PackageName=Symantec AntiVirus.msi,Language=1046,Version=184553390,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={C4377C75-A241-45A4-B64D-51E62230CC83},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0)

My instalation is in portuguese, so the 'value 3' here is 'Valor de retorno 3'

[Migration User]

1: Make sure you completely uninstall live update and then install it back.Once done try running the SEP installation.

2: Is the installation running is unattend or silent mode? If it is in silent mode,try it with unattend and check if you get any error message related to lucheck or live update .

3: Try running SEP installation with a different user account.

4; If none of these work, check or post the results of LUResult.txt which can be found at C:\Program Files\Symantec\Liveupdate\


......Barkha

[Migration User]

1 -
a) i completely uninstalled the live update and tried to install SEP
b) i installed live update again and tried to install SEP
both have the same error

2- i'm installing in unatend mode.
no errors are displayed.

3- Tried with a different user (with administrator rights), the result is this:

MSI (s) (B8:0C) [20:38:37:390]: Invoking remote custom action. DLL: C:\WINNT\Installer\MSI21D.tmp, Entrypoint: InstallLiveUpdate
LUCA: InstallLiveUpdate enter.
LUCA: C:\DOCUME~1\Andre\LOCALS~1\Temp\KJRHLUWO\LiveUpdate\lucheck.exe
LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206
MSI (s) (B8:98) [20:39:25:046]: User policy value 'DisableRollback' is 0
MSI (s) (B8:98) [20:39:25:046]: Machine policy value 'DisableRollback' is 0
Ação concluída 20:39:25: InstallFinalize. Valor de retorno 3.
MSI (s) (B8:98) [20:39:25:125]: Executing op: Header(Signature=1397708873,Version=301,Timestamp=983475398,LangId=1046,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
MSI (s) (B8:98) [20:39:25:125]: Executing op: DialogInfo(Type=0,Argument=1046)
MSI (s) (B8:98) [20:39:25:125]: Executing op: DialogInfo(Type=1,Argument=Symantec Endpoint Protection)
MSI (s) (B8:98) [20:39:25:125]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Repetindo a ação:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removendo arquivos de backup,CleanupTemplate=Arquivo: [1])
MSI (s) (B8:98) [20:39:25:125]: Executing op: ActionStart(Name=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,,)
MSI (s) (B8:98) [20:39:25:125]: Executing op: ProductInfo(ProductKey={C1B0BDC8-0624-4036-90D1-F7DF0EE8C96D},ProductName=Symantec Endpoint Protection,PackageName=Symantec AntiVirus.msi,Language=1046,Version=184553390,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={C4377C75-A241-45A4-B64D-51E62230CC83},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0)

4 - LUResult.txt (when live update is installed alone) :

Installed
0
LiveUpdate has been successfully installed on your machine.

The final return code after remapping is 0
Install result reported from LuInsDll.dll
Install Version 3.3.0.73

Thanks

[Migration User]

1) It certainly looks like the liveupdate issue. Clean it inside out before installing liveupdate again. Remove the directories "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate", "C:\Program Files\symantec\liveUpdate" , "C:\Program Files\common Files\symantec Shared\VirusDefs"
 

[Migration User]

Hi Sandeep,

Uninstalled LiveUpdate and removed the entire symentec folders above.
The same error again.

Thanks

[Migration User]

Hi,

Try the following steps:

1; On the Windows taskbar, click Start > Run.
2: In the Open box, type the following text:dcomcnfg> ok
3: Expand Component Services > Computers > My Computer
4: Right-click My Computer, and then click Properties.
5: On the Default Properties tab, on the Default Impersonation Level menu, click Identify.>ok
6: Expand My Computer > DCOM Config.
7: Right-click LuComServer, and then click Properties.
8: On the Identity tab, select This User.
9; Click Browse and browse to the Local Administrator account for the computer.
10; Type and confirm the password for the Local Administrator account >ok

11: Also register Wintrust.dll

On the Windows taskbar, click Start > Run.
In the Run dialog box, type the following text:

regsvr32 wintrust.dll

Press Enter.
Click OK at the next prompt.

12: Restart the computer so that the changes take effect.
13: Install SEP.

......Barkha



To register Wintrust.dll
On the Windows taskbar, click Start > Run.
In the Run dialog box, type the following text:

regsvr32 wintrust.dll

Press Enter.
Click OK at the next prompt.

[Migration User]

1 - ok
2 - ok
3 - ok
4 - ok
5 - problem, i can't enable the box 'Enable Distributed COM on this computer'.
when i try, it give me an error and tell me to send an Error Report to Microsoft.
Details:

AppName: mmc.exe AppVer: 5.2.3790.3959 ModName: comuid.dll
ModVer: 2001.12.4720.3959 Offset: 0002g9aa

i can send more details for the error above if needed
6 - ok
7 - i didn't find the LuComServer (now the LiveUpdate is not installed)
8 - need step 7
9 - need step 7
10 - need step 7
11 - ok
12 - not yet
13 - not yet

[Migration User]

First install live update, only then try the dcom permisssions.


......Barkha

[Migration User]

1 - ok
2 - ok
3 - ok
4 - ok
5 - problem, i can't enable the box 'Enable Distributed COM on this computer'.
when i try, it give me an error and tell me to send an Error Report to Microsoft.
Details:

AppName: mmc.exe AppVer: 5.2.3790.3959 ModName: comuid.dll
ModVer: 2001.12.4720.3959 Offset: 0002g9aa

i can send more details for the error above if needed
6 - ok
7 - ok
8 - ok
9 - ok
10 - ok
11 - ok
12 - not yet
13 - not yet

[Migration User]

About the mmc crash issue, i think it can be a permission issue,though i am not very positive about it.

Make sure the user has local admin previliges.Also i was going through a thread about the same mmc crash.

http://www.tech-archive.net/Archive/Windows/microsoft.public.windows.server.clustering/2006-08/msg00152.html


Here it is mentioned "The crashp problem has been fixed, One of our IT guys added more users to
the Administrators group and that seamed to cause Component Services not to
crash any more."

Meanwhile i will try to look for more details.if i find anything i will keep you posted.



......Barkha