Endpoint Installation on Clients Computers Through SCCM

Dears I have deployed clients to install endpoint protection through SCCM 2012 and we have almost 1500 computers, after deploying I found out half of computer didnt install endpoint protection and the rest was successfully done, in our company we have Windows 7, Windows 8 and Windows Server 2008R2, some Windows 7 got the installation and the most of the severs too, I try to know what is the problem even I check firewall and some securities I couldnt find the problem, is there any solutions or idea to fix my problem, thanks.

March 13th, 2013 10:59am

check the EndpointProtectionAgent.log on a few of the failed clients. Do you have another antivirus engine installed?
Free Windows Admin Tool Kit Click here and download it now
March 13th, 2013 11:07am

Dear Kent, we have kaspersky installed, but in endpoint installed in some of the computers which they have already kaspersky installed too.

This log is the last part on the computer who didn't installed the endpoint please see below log:

]LOG]!><time="14:54:03.640-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7576" file="epagentutil.cpp:406">
<![LOG[EP State and Error Code didn't get changed, skip resend state message.]LOG]!><time="14:54:03.640-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7576" file="epagentimpl.cpp:146">
<![LOG[State 4 is NOT changed. Skip update registry value]LOG]!><time="14:54:03.640-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7576" file="epagentimpl.cpp:183">
<![LOG[Failed to install EP client with exit code = 0x80070643.]LOG]!><time="14:54:03.640-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="3" thread="7576" file="epagentimpl.cpp:485">
<![LOG[Register a timer here to check whether definition get updated in 30 minutes.]LOG]!><time="14:54:03.640-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7576" file="epagentimpl.cpp:1006">
<![LOG[FW Provider is NOT installed yet.]LOG]!><time="14:54:03.642-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7576" file="epagentutil.cpp:778">
<![LOG[File C:\Windows\ccmsetup\WindowsFirewallConfigurationProvider.msi installation failed with error = 0x80070643.]LOG]!><time="14:54:03.994-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="2" thread="7576" file="epagentutil.cpp:845">
<![LOG[Failed to install FW MSI with error = 0x80070643.]LOG]!><time="14:54:03.994-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="3" thread="7576" file="epagentimpl.cpp:763">

And This log is for the last part for computer who installed endpontm please see below log:

<![LOG[Endpoint is triggered by WMI notification.]LOG]!><time="08:44:30.465-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="fepsettingendpoint.cpp:125">
<![LOG[EP State and Error Code didn't get changed, skip resend state message.]LOG]!><time="08:44:30.490-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="epagentimpl.cpp:146">
<![LOG[State 1 is NOT changed. Skip update registry value]LOG]!><time="08:44:30.490-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="epagentimpl.cpp:183">
<![LOG[File C:\Windows\ccmsetup\SCEPInstall.exe version is 2.2.903.0.]LOG]!><time="08:44:30.491-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="epagentutil.cpp:499">
<![LOG[EP version 2.2.903.0 is already installed.]LOG]!><time="08:44:30.491-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="epagentutil.cpp:200">
<![LOG[Expected Version 2.2.903.0 is exactly same with installed version 2.2.903.0.]LOG]!><time="08:44:30.491-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="epagentutil.cpp:218">
<![LOG[AM Policy XML is ready.]LOG]!><time="08:44:30.491-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="epagentutil.cpp:314">
<![LOG[Handle AM Policy.]LOG]!><time="08:44:30.491-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="epagentimpl.cpp:844">
<![LOG[Generate AM Policy XML while EP is disabled.]LOG]!><time="08:44:30.519-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="7164" file="epagentimpl.cpp:884">
<![LOG[Endpoint is triggered by WMI notification.]LOG]!><time="14:50:39.322-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="fepsettingendpoint.cpp:125">
<![LOG[EP State and Error Code didn't get changed, skip resend state message.]LOG]!><time="14:50:39.362-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="epagentimpl.cpp:146">
<![LOG[State 1 is NOT changed. Skip update registry value]LOG]!><time="14:50:39.362-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="epagentimpl.cpp:183">
<![LOG[File C:\Windows\ccmsetup\SCEPInstall.exe version is 2.2.903.0.]LOG]!><time="14:50:39.362-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="epagentutil.cpp:499">
<![LOG[EP version 2.2.903.0 is already installed.]LOG]!><time="14:50:39.362-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="epagentutil.cpp:200">
<![LOG[Expected Version 2.2.903.0 is exactly same with installed version 2.2.903.0.]LOG]!><time="14:50:39.362-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="epagentutil.cpp:218">
<![LOG[AM Policy XML is ready.]LOG]!><time="14:50:39.363-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="epagentutil.cpp:314">
<![LOG[Handle AM Policy.]LOG]!><time="14:50:39.363-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="epagentimpl.cpp:844">
<![LOG[Generate AM Policy XML while EP is disabled.]LOG]!><time="14:50:39.404-180" date="03-13-2013" component="EndpointProtectionAgent" context="" type="1" thread="6260" file="epagentimpl.cpp:884">

  • Edited by Dana.Kadi Wednesday, March 13, 2013 12:20 PM More explain
March 13th, 2013 11:53am

check the EndpointProtectionAgent.log on a few of the failed clients. Do you have another antivirus engine
Free Windows Admin Tool Kit Click here and download it now
March 14th, 2013 1:23pm

See this...

If you try to install the Endpoint Protection client on a computer and the uninstall of an existing antimalware solution is not supported, then the Endpoint Protection client installation will fail. In this case, you can use application management to uninstall the existing antimalware solution, install the Endpoint Protection client and then use the Manage Endpoint Protection client on client computers client setting to let Configuration Manager manage the newly installed Endpoint Protection client. http://technet.microsoft.com/en-us/library/gg682067.aspx

Endpoint Protection uninstalls the following antimalware software only:

  • Symantec AntiVirus Corporate Edition version 10
  • Symantec Endpoint Protection version 11
  • Symantec Endpoint Protection Small Business Edition version 12
  • McAfee VirusScan Enterprise version 8
  • Trend Micro OfficeScan
  • Microsoft Forefront Codename Stirling Beta 2
  • Microsoft Forefront Codename Stirling Beta 3
  • Microsoft Forefront Client Security v1
  • Microsoft Security Essentials v1
  • Microsoft Security Essentials 2010
  • Microsoft Forefront Endpoint Protection 2010
  • Microsoft Security Center Online v1

If you have other Versions or Products you have to make a package for it to uninstall. Something like this article can tell you more about:

March 15th, 2013 9:34am

Thanks PaddyMaddy but still not working...
Free Windows Admin Tool Kit Click here and download it now
March 20th, 2013 6:58pm

Yes, I know this is an old post, but Im trying to clean them up. Did you solve this problem, if so what was the solution?

February 7th, 2015 12:04am

Since no one has answer this post, I recommend opening  a support case with CSS as they can work with you to solve this problem.

Free Windows Admin Tool Kit Click here and download it now
April 25th, 2015 10:06am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics