Endpoint Protection

We installed SEP11 MR4 MP2 on about 30 systems while testing out the product.  We just started pushing out the client from out production box.  Now the 30 that had SEP11 install are in a constain install loop.  The install is killing the client and you can't stop the install to uninstall it.  Any ideas?

Thanks,

Kris Turner

 From the task manager?

We do. As soon as you kill one.. another one starts... 

Stop Windows Installer Service and set it to disable/manual Status and reboot the computer. Then try to repair or uninstall SEP Client.

Hi Kris,

I have had this problem happen to me several times in the past and have even had this happen to me today.  Oddly enough, SEPM has some weird behavior. 
Here is my scenario, and hopefully will point you in the right direction for yours, also here are some ways "I can force the loop".
* * * * * * * *

SEP installed on ALL clients in my Domain are installed in c:\Symantec (This allows me to have a standard install in 32 and 64 bit).
All my user accounts have been moved from "C:\documents and settings..." to "D:\Windows\Profiles\[user name]"

* * * * * * * * *
If I want to force a Loop of the installer, I start a command prompt and:
chkdsk /X d:

This prompts me to unmount the Volume before checking.  If I say YES to this, the Symantec Installer goes crazy and begins to loop.  The only reason I could see why it would do this, is it depends on some files in the %user% folder in order to run properly.  Normally, this is supposed to be "priviledged space" and should not require any kind of interaction from a local user.  But it doesn't.

So, what I would do, if I was you and wanted to test this theory...  do you have a test machine? 
I know it works in my environment.  I can do it anytime I like.  I should probably even FRAPS it and post the video of me doing so Symantec can address the issue.


From any machine, that is currently looping, either login as administrator or open a command prompt and type: "runas /noprofile /user:[domain]\administrator cmd"
It will prompt you for the domain admin password.  Once entered will open a new prompt.  This will be an administrative prompt.  In this new prompt, type:

cacls [location of user profiles] /E /T /G everyone:F

** In my case the command would be:
cacls D:\Windows\Profiles /E /T /G everyone:F **

This will modify the current "security" policies on the folders contain therein, maintaining the existing, but adding FULL control to "everyone". 

Thanks,

I think I found a way to at least get around it.  We found that if we disable all Symantec Endpoint services then remove everything in c:\windows\temp and reboot the loop is no longer there.  We then can remove the client from add/remove programs and then push out the new client from our production server.

I will also try the above to see which might be easier on our support team.

Here is a KB doc that may be able to help you with this issue.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008040218173948

I may be that a previous install on the system has conflicted with this new install and is causing Windows to keep reporting that it needs to be installed.
Feel free to try this and let us know the results.

You can also Check the Event Viewer & see if there are any error or warning related to Msi if yes then please check what information it has.
It is quite possible that it might show some folders missing please add those missing folder manually & then run a repair & see if it works?