/build/static/layout/Breadcrumb_cap_w.png

Symantec Endpoint Protection

Hello Ninjas,
I am having trouble doing what looks like a pretty easy task; a managed installation of Symantec endpoint protection.

I have the K1000 (v7.0.121306) and I am trying to deploy to windows systems.

I have the software installed on a few systems, cataloged in software catalog and have associated the SEP_12.1.6-MP6_Win64.exe install file in the same software catalog area.

In Managed Installations I have symantec endpoint protection 12.x and in that area have again associated the cataloged software with the install .exe file I have on my network share.

in installation options I have chosen default with these additional parameters: setup /s /v"/l*v log.txt /qn RUNLIVEUPDATE=0 REBOOT=REALLYSUPPRESS"

at the bottom of the managed installation page I see this: Install using "sep_12.1.6_mp6_win64.exe":

The Windows client will install this via:
"sep_12.1.6_mp6_win64.exe" setup /s /v"/l*v log.txt /qn RUNLIVEUPDATE=0 REBOOT=REALLYSUPPRESS"


when I run now, the system I am pushing out to never seems to get the installation installed.

when I go over to the scripting, security policies and choose symantec antivirus, I try most of the same things run the script and in the Run Now status see that the operation is successful, but it is still not installed on the system.

Output Log

Running as SYSTEM
Checking if registry 'HKEY_LOCAL_MACHINE\SOFTWARE\Kace\MSIWizard\7034' value 'MSIConfigHash' is equal to '1903504726' did not succeed: (2)
Installed: Symantec Endpoint Protection
Setting registry 'HKEY_LOCAL_MACHINE\SOFTWARE\Kace\MSIWizard\7034' value 'MSIConfigHash' equal to '1903504726' succeeded
Symantec Endpoint Protection installed with C:\Windows\System32\msiexec.exe /qn  /l* "log.txt" setup /s /v"/l*v log.txt /qn RUNLIVEUPDATE=0 REBOOT=REALLYSUPPRESS"  /i SEP64.msi ADDLOCAL=
Checking if registry 'HKEY_LOCAL_MACHINE\SOFTWARE\Kace\MSIWizard\7034' value 'MSIConfigHash' is equal to '1903504726' succeeded

Activity Log

verify - registry_value_is Checking if registry 'HKEY_LOCAL_MACHINE\SOFTWARE\Kace\MSIWizard\7034' value 'MSIConfigHash' is equal to '1903504726' verify - install verify - set_registry_value Setting registry 'HKEY_LOCAL_MACHINE\SOFTWARE\Kace\MSIWizard\7034' value 'MSIConfigHash' equal to '1903504726' verify - on_remediation_success verify - on_remediation_failure verify - log_message verify - registry_value_is Checking if registry 'HKEY_LOCAL_MACHINE\SOFTWARE\Kace\MSIWizard\7034' value 'MSIConfigHash' is equal to '1903504726' verify - on_verify_success verify - on_verify_failure

Debug Log

Running kbot: runkbot 116 1486747980 KBotScript::LogScriptInfo - Start id=116 name=Symantec Policy version=1486747979 type=policy execute disconnected=false logged_off=false execute events KBotScript::LogScriptInfo - Finish KBotScript::LogScriptInfo - Start id=116 name=Symantec Policy version=1486747979 type=policy execute disconnected=false logged_off=false execute events KBotScript::LogScriptInfo - Finish


any help would be appreciated,

Thank you









2 Comments   [ + ] Show comments
  • can you post screenshots of the full MI page? - JasonEgg 3 years ago
  • Image in 3 parts posted. thanks - dnitty67 3 years ago

Answers (1)

Posted by: rskwire 3 years ago
Blue Belt
0
Here's what I did.

I created a SEP installer package with the help of my sysadmin who has access to the SEP management console.

I then created a BAT file, sepstart.bat, with the following parameters:

start /wait setup.exe /s /v"/l*v log.txt /qn RUNLIVEUPDATE=1 SYMREBOOT=REALLYSUPPRESS"

This BAT file and all my SEP installer files are ZIP'd up. I find a Software Inventory record for SEP and associate this ZIP file with it. Then, my SEP managed installation associates with the SEP zip from Software, and the installation option is:

Override default installation: sepstart.bat

lhpFNZ.jpeg
 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ