Endpoint Protection

 View Only
Expand all | Collapse all

SEPM Clients (find unmanaged computers) Installation Package Fails

  • 1.  SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 15, 2013 04:26 PM

    I am setting up SEPM to push down the virus updates to the managed clients. I currently have 4 clients in the default workgroup and have 7 that are still unknown. WHen I search for the unmanaged clients it finds the 7 PC's in the domain, but when I try do client installation package it fails. Any thoughts?

    Symantec Error2.jpg

     



  • 2.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 15, 2013 05:18 PM

    What's the OS of the machines?

    Is the remote registry service enabled?

    Have the machines met the requirements?

    How to prepare computers to install Symantec Endpoint Protection 11 client software

    http://www.symantec.com/docs/HOWTO36145



  • 3.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 15, 2013 06:15 PM

    What version of SEPM 11 are you running? "Find Unmanaged Computers..." went away in SEPM 12.1.

    Have you considered upgrading to SEP 12.1 on general principles?

    MJD



  • 4.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 15, 2013 06:27 PM

    Disabled UAC/disabled windows firewall? and make sure remote registry serivce is enabled.



  • 5.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 16, 2013 01:46 AM

    What is your aep version?

    Disable the firewall service and try again



  • 6.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 16, 2013 02:22 AM

    Hi,

     

    Check windows firewall services is stop or not.

    if its not please stop the firewall services and check again. 

     

    check this link also.

    http://www.symantec.com/docs/TECH103107

     

    https://www-secure.symantec.com/connect/forums/client-installation-using-find-unmanaged-computers-failing

    http://www.symantec.com/docs/TECH102342

    http://www.symantec.com/docs/TECH103042

     



  • 7.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 16, 2013 08:03 AM

    I appologize, I forgot to give all of the pertinent information for more full picture.

    SEPM Server - 11.1

    Server - Windows 2003 32 bit OS

    Client - Windows 7 Enterprise 64 bit OS

    -All clients have firewall disabled

    -SEP Client - 11.0 (Each client has it installed from the corporate image)

    ---------------------------------------------------------------------------------------------------------------------------------------------

    This morning I will begin to uninstall all of the legacy SEP on each client. This is the only step that I haven't done in the "How to prepare computers to install Symantec Endpoint Protection 11 client software"

    http://www.symantec.com/business/support/index?page=content&id=HOWTO36145

     



  • 8.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 16, 2013 08:04 AM

    This is the version that we were given by corporate. This server doesn't touch the internet and has no ability to upgrade to SEP 12.1 unless I burn it to disk.



  • 9.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 16, 2013 08:06 AM

    AEP?.... All the clients have the firewall disabled



  • 10.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 16, 2013 08:07 AM

    All the clients have the firewall disabled..... Remote Registry Service enabled? I'll have to check into this.



  • 11.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 16, 2013 09:23 AM

    Does the Remote Registry Key have to be enabled even if you have Admin rights on the PC?



  • 12.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 16, 2013 09:29 AM

    Yes, the service needs to be enabled/started.



  • 13.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 16, 2013 09:39 AM

    It needs to be Enabled.

    Here is the checklist of all the services and registries for remotep push install of SEP

    http://www.symantec.com/business/support/index?page=content&id=HOWTO80805



  • 14.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 16, 2013 11:21 AM

    Here is my issue with this......

    1. Half of the clients are loaded to the SEPM clients default workgroup and are having updates pushed to them and are fine. The only thing I did was disable the firewall.

    1. Remote Registry Service: startup is 'manual'
    2. SEP software was legacy and already on the machine from Coporate image
    3. Windows Defender 'on'

    2. The other half of the clients I just completed

    1. Remote Registry Service: startup is 'automatic'
    2. SEP uninstalled
    3. WIndows Defender disabled

    And I re-run Installation package for unmanaged clients and it failed on all of them. Am I missing something here? Cause this doesn't make sense on half didn't touch them and it worked fine and the other half with all the tinkering and they are failing.

    Anyone?



  • 15.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails
    Best Answer

    Posted Aug 16, 2013 11:44 AM

    Are you sure of the ID and password for the workgroup? Coz in many situations I have seen that each machine has different local admin ID and Password.

    From the location

    C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat\bin

    Copy the clientremote.exe and clientremoteres.dll file to a machine which is already in the workgroup along with your package.

    Run the clientremote.exe

    If push is successful that means ID and password is correct and package is pushed successfully

    If the Installation failed then its the issue on the client and we need to check the SEP_inst.log



  • 16.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 16, 2013 11:48 AM

    Check these

     
    1) HTTP 400 - Bad Request communication error for Symantec Endpoint Protection Manager (SEPM) 11.x
     

    3) Symantec Endpoint Protection clients do not communicate with their Manager: 400 - Bad Request in Sylink log
     
    In addition check your IIS logs 

     



  • 17.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 16, 2013 12:05 PM

    Stupid question, but just wante to clarify I understand.

    Copy the "clientremote.exe and clientremoteres.dll file to a machine which is already in the workgroup" i.e. client that shows up in the SEPM client default workgroup?

    Also when I Click Browse and Specify the Folder containing the client Software.... Is this the client software on the server? where SEPM is installed?

     

     



  • 18.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 16, 2013 12:21 PM

    From the first screen shot what you have posted. You are trying to install SEP to a workgroup not to a domain right? Isn't it?

    If thats true then copy the client remote and also the SEP installer to a workgroup and do the push from that machine to others.

     



  • 19.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 16, 2013 12:43 PM

    I am failing to understand, I must appologize.

    I have a Windows 2003 server that all of the 10 clients are loaded to the domain. SEPM is on this domain server with 4 of the clients that are in the SEPM clients default workgroup and the other 6 as unmanaged clients.

    I do a search for unmanaged clients and 6 are found. I select all 6 clients and the option is to push Installation to the unmanaged clients.

    If I understand right (sorry, my thick head), Copy the clientremote.exe and clientremoteres.dll file to a unmanaged client and a full install package.exe. run clientremote.exe from the unmanaged client, then browse and point to the install executable.

     



  • 20.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 16, 2013 01:13 PM

    But why in the Screen shot you have selected Workgroup. It should be your Domain and your domain admin Id and password. Look at the screen shot what you have posted again.



  • 21.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 16, 2013 02:41 PM

    Ah, yes. Sorry, I realized that I did that and re-did the scan but didn't update the screenshot. It still failed.

    Current Status:

    I copied the clientremote.exe and clientremoteres.dll file to a machine along with the package I created. I tried to push it to all the unmanaged PC's that I selected, but it kept failing.

    So I went to each PC and ran the setup.exe package that you suggested I copy over. The package installed SEP and loaded the client to the SEPM client default workgroup and updated the virus definitions. Unfortunately I had to do it on each PC and I don't know why the push didn't work.

    Not sure if I am going to have problems with pushes in the future, but for right now everything is up and running and all clients up to date and in the SEPM client workgroup.

    Thank you so much for helping me ....... I couldn't have done it without help. And thank you for you patience with me.



  • 22.  RE: SEPM Clients (find unmanaged computers) Installation Package Fails

    Posted Aug 16, 2013 02:51 PM

    Happy to help :) . This solution is very important to me and I will not forget this. This was my 1000 Solution. :) Thank you.

    Happy weekend.