Unable to install Endpoint Protection client on Windows 10 after applying MS KB3140743

Products

• Endpoint Protection

Issue/Introduction

After updating a Windows 10 computer with Microsoft Windows update KB3140743 (March 1st, 2016) or any subsequent cumulative update (such as KB3140768), the Endpoint Protection client installation fails and rolls back.

SEP_INST.log:

MSI (s) (58:EC) [14:02:24:035]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI45B6.tmp, Entrypoint: ShowServiceProgress
ScriptGen: ShowServiceProgress() MSIRUNMODE_SCHEDULED
ScriptGen: ShowServiceProgress() calling WaitForSingleObject(scriptStarted) ...
ScriptGen: ShowServiceProgress() WaitForSingleObject(scriptStarted) returned WAIT_OBJECT_0
ScriptGen: ShowServiceProgress() script execution failed.
ScriptGen: ShowServiceProgress() reset script failure event.
ScriptGen: ShowServiceProgress() is returning an error (so close to the end!)
CustomAction ShowServiceProgress returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (58:84) [14:02:41:489]: Note: 1: 2265 2: 3: -2147287035
MSI (s) (58:84) [14:02:41:489]: User policy value 'DisableRollback' is 0
MSI (s) (58:84) [14:02:41:489]: Machine policy value 'DisableRollback' is 0
Action ended 14:02:41: InstallFinalize. Return value 3

SIS_INST.log:

2016-03-04T19:29:33.240Z INFO I SIS Executing action ( 2019 ) - CreateRegistryValue currentPosition: 772806
2016-03-04T19:29:33.262Z INFO I SIS KEY_NAME=[SOFTWARE\Microsoft\Windows Defender]
2016-03-04T19:29:33.262Z INFO I SIS VALUE_NAME=[DisableAntiSpyware]
2016-03-04T19:29:33.262Z DEBUG I SIS VALUE_TYPE=[DWORD]
2016-03-04T19:29:33.262Z DEBUG I SIS VALUE_DATA=[1]
2016-03-04T19:29:33.378Z ERROR I SIS ZwSetValueKey() failed in thal::RegistryWriteValue() status: 0xC0000022 = {Access Denied} A process has requested access to an object, but has not been granted those access rights.
2016-03-04T19:29:33.378Z ERROR I SIS RegistryWriteValue() failed. 0xC0000022 = {Access Denied} A process has requested access to an object, but has not been granted those access rights.

Resolution

This issue is fixed in Symantec Endpoint Protection 12.1.6.4 (RU6 MP4). For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec Endpoint Protection.