McAfee Epolicy Orchestrator 5.1

My boss who controls EVERYTHING in our department recently asked me to look at the new McAfee ePolicy Orchestrator 5.1 console and to create a new Frame Package that will talk to all of the machines in our Active Directory and uninstall McAfee 8.7 and install the updated McAfee 8.8 edition.  I have been successful in creating a Framepkg, but when I run it on a machine it looks like the Frame Package is working correctly but it begins to rollback the installation and says "There was an error trying to install"..  

I have created a Frame Package and installed it on a machine that was within our Domain (Active Directory) and it did not have McAfee 8.7 already installed, and the Frame Package worked fine and the installation was a success, however, this is my FIRST TIME dealing with ePolicy Orchestrator and I can NOT get any help from my coworker...

ANY HELP, would be GREATLY APPRECIATED....
AStartechAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

btanExec ConsultantCommented:
This may be useful as it is mentioned there are some McAfee product that cannot be uninstalled by running the 8.8 install directly and likely required manual uninstalled...I do notice some McAfee 8.7 modules not possible, do check out
a list of all McAfee and third-party products that VSE currently supports removing during VSE installation. This means VSE will attempt to uninstall the product using the uninstall string from the registry. If the uninstall command fails, is not present, or requires user interaction, VSE may not be able to uninstall the third party product.
https://kc.mcafee.com/corporate/index?page=content&id=KB72251

Also there is mentioned the McAfee module may prevent its uninstallation
Sometimes you might have to manually remove the CMA.

For example:
A failed upgrade leaves mismatched files that prevent standard removal methods.
Issues with the Access Protection features included in VSE 8.5i (or later).
File corruption before or during an upgrade.
Conflicts with third-party software.
In VSE 8.5i (and later), the Access Protection option Prevent McAfee services from being stopped might require extra steps to be done.
https://kc.mcafee.com/corporate/index?page=content&id=KB55208

Also credential to install does not have the admin rights can impact it too but unlikely in your case though.
We can force install e.g. C:\framepkg.exe /install=agent /forceinstall
 
If above is successful then it confirm that the credential is being used to deploy the agent through ePO does not have local administrative privileges on the client machine. So in agent deployment task use an account which has local administrative privileges and also check the option "Force install".
Ref - Install guide for 8.8 in case needed -
https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/22000/PD22944/en_US/vse_880_installation_guide_en-us.pdf
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
asavenerCommented:
I've had to do this in batches.  Create a client task to uninstall McAfee VSE, and a task to install McAfee VSE.

Once you do that, you have a couple of options.  One is to select a node or group of nodes and then do a "run client task now" to first uninstall and then reinstall.

Another option is to create spots in your system tree where you can drop nodes.  Assign a client tasks with a schedule of "run immediately" to the folders in the system tree, and then drop your nodes in the uninstall, wait a while for them to check in and run the task, then move them to the install folder.

Yet another option would be creating client tasks that apply to certain tags, and then tagging your nodes.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.