none
Forefront Endpoint Protection fails to automatically remove McAfee VirusScan 8.7 and install.

    Question

  • Hi Everyone,

    I have the job of rolling Forefront Endpoint Protection out to 3000+ PCs.  I am deploying the client via the SCCM console by advertising the package to a collection but it fails to run and the installation fails with the Error code:0x80070002.  If I remove the McAfee software manually and re-run the advertisement the software will install but this isn't the point.  I have roll this out seamlessly and cannot go round manually removing the McAfee software.

    Microsoft advertise the FEP software as being capable of automatically detecting the McAfee the software and removing it before installing.  However this doesnt appear to work! 

    Please help!


    Spooter
    Thursday, June 02, 2011 12:56 PM

All replies

  • Hi,

    Have you turned of access protection in the mcafee client before deploying FEP at which point FEP will fail to uninstall the Mcafee software.
    You could check the EppSetup.log located in %allusersprofile%\Microsoft\Microsoft Security Client\Support for more info from the setup of FEP.

    Regards,
    Jörgen


    -- My System center blog ccmexec.com --
    Thursday, June 02, 2011 3:01 PM
  • Hi Jorgen,

    Thanks for your reply.  I was quite hopeful after seeing your suggestion but this doesn't appear to have worked.  I modified the McAfee Access Protection policy and pushed it to the test machines but the FEP installation still fails and I get the below events in the application log.

    Event 1

    HRESULT:0x80070002
    Description:Cannot complete the Forefront Endpoint Protection installation. An error has prevented the Forefront Endpoint Protection setup wizard from completing successfully. Please restart your computer and try again. Error code:0x80070002. The system cannot find the file specified.

    Event 2

    The program for advertisement "S04200D0" failed ("S0400156" - "Install"). The failure description was "Cannot complete the Forefront Endpoint Protection installation. An error has prevented the Forefront Endpoint Protection setup wizard from completing successfully. Please restart your computer and try again. Error code:0x80070002. The system cannot find the file specified.  ".
    User context: NT AUTHORITY\SYSTEM

    Possible cause: The program generated an installation status Management Information Format (MIF) file with a status value of Failed.
    Solution: For more information about the failure, refer to the documentation for the program you are distributing.

    The EppSetup.log has the below error message.

    Operation failed: MorroBootstraper::CInstallFlow::InternalRun - GetCompetitiveAppRemoveAction - Cannot complete the Forefront Endpoint Protection installation. An error has prevented the Forefront Endpoint Protection setup wizard from completing successfully. Please restart your computer and try again. Error code:0x80070002. The system cannot find the file specified.   [80070002]


    Spooter
    Friday, June 03, 2011 6:41 AM
  • HI,

    Have you solved this already or still a problem?

    /Jörgen


    -- My System Center blog ccmexec.com --
    Saturday, July 30, 2011 10:05 AM
  • Hi Spooter,

     

    I don´t know if you have access to the McAfee ePO server? If you have you should be able to look at a clients Threat Event log and see if McAfee is blocking the FEP removal of the VirusScan 8.7.

     

    Good Luck!

     

    /Tobias

    Monday, August 01, 2011 7:44 AM
  • Hi Everyone

     

    We're about to do the same with 3000 clients although we will need to contend with Trend Micro. I will be more than happy to post our results and hopefully it will provide some insight for us all.

     

    Simon

    Monday, August 22, 2011 3:40 PM
  • Hi Spooter,

    Did you get anywhere with this? We will be deploying FEP 2012 to replace McAfee 8.8, I will post what we come up with to keep this topic alive. The one curve-ball we will have is we will be doing a cross forest migration first into a new forest and then deploying FEP using SCCM in the new domain. So the McAfee management will be unavailable to make client changes after we migrate computer accounts first.

    ----------

    Nick

    Tuesday, July 03, 2012 11:55 PM