locked
Endpoint Installation on Clients Computers Through SCCM RRS feed

  • Question

  • Dears I have deployed clients to install endpoint protection through SCCM 2012 and we have almost 1500 computers, after deploying I found out half of computer didn’t install endpoint protection and the rest was successfully done, in our company we have Windows 7, Windows 8 and Windows Server 2008R2, some Windows 7 got the installation and the most of the severs too, I try to know what is the problem even I check firewall and some securities I couldn’t find the problem, is there any solutions or idea to fix my problem, thanks.

    Wednesday, March 13, 2013 10:59 AM

Answers

  • Since no one has answer this post, I recommend opening  a support case with CSS as they can work with you to solve this problem.


    Garth Jones | My blogs: Enhansoft and Old Blog site | Twitter: @GarthMJ

    • Proposed as answer by Garth JonesMVP Saturday, April 25, 2015 2:04 PM
    • Marked as answer by Garth JonesMVP Saturday, February 13, 2016 8:54 PM
    Saturday, April 25, 2015 2:04 PM

All replies

  • check the EndpointProtectionAgent.log on a few of the failed clients. Do you have another antivirus engine installed?

    Kent Agerlund | My blogs: blog.coretech.dk/kea and SCUG.dk/ | Twitter: @Agerlund | Linkedin: Kent Agerlund | Mastering ConfigMgr 2012 The Fundamentals

    • Marked as answer by Dana.Kadi Thursday, March 14, 2013 6:15 AM
    • Unmarked as answer by Dana.Kadi Thursday, March 14, 2013 1:23 PM
    Wednesday, March 13, 2013 11:07 AM
  • Dear Kent, we have kaspersky installed, but in endpoint installed in some of the computers which they have already kaspersky installed too.

    This log is the last part on the computer who didn't installed the endpoint please see below log:

    ]LOG]!><time="14:54:03.640-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7576" file="epagentutil.cpp:406">
    <![LOG[EP State and Error Code didn't get changed, skip resend state message.]LOG]!><time="14:54:03.640-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7576" file="epagentimpl.cpp:146">
    <![LOG[State 4 is NOT changed. Skip update registry value]LOG]!><time="14:54:03.640-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7576" file="epagentimpl.cpp:183">
    <![LOG[Failed to install EP client with exit code = 0x80070643.]LOG]!><time="14:54:03.640-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="3" thread="7576" file="epagentimpl.cpp:485">
    <![LOG[Register a timer here to check whether definition get updated in 30 minutes.]LOG]!><time="14:54:03.640-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7576" file="epagentimpl.cpp:1006">
    <![LOG[FW Provider is NOT installed yet.]LOG]!><time="14:54:03.642-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7576" file="epagentutil.cpp:778">
    <![LOG[File C:\Windows\ccmsetup\WindowsFirewallConfigurationProvider.msi installation failed with error = 0x80070643.]LOG]!><time="14:54:03.994-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="2" thread="7576" file="epagentutil.cpp:845">
    <![LOG[Failed to install FW MSI with error = 0x80070643.]LOG]!><time="14:54:03.994-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="3" thread="7576" file="epagentimpl.cpp:763">

    And This log is for the last part for computer who installed endpontm please see below log:

    <![LOG[Endpoint is triggered by WMI notification.]LOG]!><time="08:44:30.465-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="fepsettingendpoint.cpp:125">
    <![LOG[EP State and Error Code didn't get changed, skip resend state message.]LOG]!><time="08:44:30.490-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="epagentimpl.cpp:146">
    <![LOG[State 1 is NOT changed. Skip update registry value]LOG]!><time="08:44:30.490-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="epagentimpl.cpp:183">
    <![LOG[File C:\Windows\ccmsetup\SCEPInstall.exe version is 2.2.903.0.]LOG]!><time="08:44:30.491-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="epagentutil.cpp:499">
    <![LOG[EP version 2.2.903.0 is already installed.]LOG]!><time="08:44:30.491-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="epagentutil.cpp:200">
    <![LOG[Expected Version 2.2.903.0 is exactly same with installed version 2.2.903.0.]LOG]!><time="08:44:30.491-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="epagentutil.cpp:218">
    <![LOG[AM Policy XML is ready.]LOG]!><time="08:44:30.491-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="epagentutil.cpp:314">
    <![LOG[Handle AM Policy.]LOG]!><time="08:44:30.491-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="epagentimpl.cpp:844">
    <![LOG[Generate AM Policy XML while EP is disabled.]LOG]!><time="08:44:30.519-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="epagentimpl.cpp:884">
    <![LOG[Endpoint is triggered by WMI notification.]LOG]!><time="14:50:39.322-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="fepsettingendpoint.cpp:125">
    <![LOG[EP State and Error Code didn't get changed, skip resend state message.]LOG]!><time="14:50:39.362-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="epagentimpl.cpp:146">
    <![LOG[State 1 is NOT changed. Skip update registry value]LOG]!><time="14:50:39.362-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="epagentimpl.cpp:183">
    <![LOG[File C:\Windows\ccmsetup\SCEPInstall.exe version is 2.2.903.0.]LOG]!><time="14:50:39.362-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="epagentutil.cpp:499">
    <![LOG[EP version 2.2.903.0 is already installed.]LOG]!><time="14:50:39.362-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="epagentutil.cpp:200">
    <![LOG[Expected Version 2.2.903.0 is exactly same with installed version 2.2.903.0.]LOG]!><time="14:50:39.362-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="epagentutil.cpp:218">
    <![LOG[AM Policy XML is ready.]LOG]!><time="14:50:39.363-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="epagentutil.cpp:314">
    <![LOG[Handle AM Policy.]LOG]!><time="14:50:39.363-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="epagentimpl.cpp:844">
    <![LOG[Generate AM Policy XML while EP is disabled.]LOG]!><time="14:50:39.404-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="epagentimpl.cpp:884">

    • Edited by Dana.Kadi Wednesday, March 13, 2013 12:20 PM More explain
    Wednesday, March 13, 2013 11:53 AM
  • check the EndpointProtectionAgent.log on a few of the failed clients. Do you have another antivirus engine installed?

    Kent Agerlund | My blogs: blog.coretech.dk/kea and SCUG.dk/ | Twitter: @Agerlund | Linkedin: Kent Agerlund | Mastering ConfigMgr 2012 The Fundamentals


    Please any update
    Thursday, March 14, 2013 1:23 PM
  • See this...

    If you try to install the Endpoint Protection client on a computer and the uninstall of an existing antimalware solution is not supported, then the Endpoint Protection client installation will fail. In this case, you can use application management to uninstall the existing antimalware solution, install the Endpoint Protection client and then use the Manage Endpoint Protection client on client computers client setting to let Configuration Manager manage the newly installed Endpoint Protection client. http://technet.microsoft.com/en-us/library/gg682067.aspx

    Endpoint Protection uninstalls the following antimalware software only:

    • Symantec AntiVirus Corporate Edition version 10
    • Symantec Endpoint Protection version 11
    • Symantec Endpoint Protection Small Business Edition version 12
    • McAfee VirusScan Enterprise version 8
    • Trend Micro OfficeScan
    • Microsoft Forefront Codename Stirling Beta 2
    • Microsoft Forefront Codename Stirling Beta 3
    • Microsoft Forefront Client Security v1
    • Microsoft Security Essentials v1
    • Microsoft Security Essentials 2010
    • Microsoft Forefront Endpoint Protection 2010
    • Microsoft Security Center Online v1

    If you have other Versions or Products you have to make a package for it to uninstall. Something like this article can tell you more about:


    This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. Click on "vote as Helpful" if you feel this post helpful to you. This can be beneficial to other community members reading the thread. ------------------------------------------------ PaddyMaddy | http://paddymaddy.blogspot.com/

    Friday, March 15, 2013 9:34 AM
  • Thanks PaddyMaddy but still not working...
    Wednesday, March 20, 2013 6:58 PM
  • Yes, I know this is an old post, but I’m trying to clean them up. Did you solve this problem, if so what was the solution?


    Garth Jones | My blogs: Enhansoft and Old Blog site | Twitter: @GarthMJ

    Saturday, February 7, 2015 12:04 AM
  • Since no one has answer this post, I recommend opening  a support case with CSS as they can work with you to solve this problem.


    Garth Jones | My blogs: Enhansoft and Old Blog site | Twitter: @GarthMJ

    • Proposed as answer by Garth JonesMVP Saturday, April 25, 2015 2:04 PM
    • Marked as answer by Garth JonesMVP Saturday, February 13, 2016 8:54 PM
    Saturday, April 25, 2015 2:04 PM