Error: "1920 Service Defwatch failed to start. Verify that you have sufficient privileges to start system services"

Article:TECH99099  |  Created: 2001-01-03  |  Updated: 2009-01-20  |  Article URL http://www.symantec.com/docs/TECH99099
Article Type
Technical Solution


Environment

Issue



When you install Symantec AntiVirus or Symantec Client Security, you see the error message "1920 Service Defwatch failed to start. Verify that you have sufficient privileges to start system services."


Solution



This problem has more than one cause, so more than one solution is provided. To fix the problem, try each of the following solutions in the order that they appear.

Confirm that you have the correct rights and permissions
The most common cause of this problem is incorrect rights or permissions. Make sure that you have Local Administrator rights to the target computer. Confirm that no restrictions on the Local Administrator or Domain Administrator accounts exist.. Follow the directions in the document Troubleshooting Symantec AntiVirus Corporate Edition installations: Checking rights and permissions.


Confirm that the Defwatch service has the correct settings
This problem can happen when the Defwatch service account has incorrect settings. Make sure that the Defwatch service is set to log on as the Local System account. Confirm that the service is allowed to interact with the desktop.

To confirm the Defwatch service settings
  1. On the Windows taskbar, click Start > Run.
  2. In the Open box, type services.msc and then click OK.
  3. Do one of the following, depending on your program version:
    • For Symantec AntiVirus 10.x, right-click the Symantec AntiVirus Definition Watcher entry.
    • For Symantec AntiVirus 9.x and earlier, right-click the Defwatch entry.
  4. Click Properties.
  5. On the Log On tab, confirm that the Local System Account is selected and that "Allow service to interact with desktop" is checked.
  6. Click OK.


Look for a Program file at the root of the OS drive.
If McAfee antivirus 4.03 or 4.5 was installed on the computer, look for a file that is named "Program" at the root of the OS drive. If the file exists, delete it.


Delete leftover registry keys from a previous version of Symantec or Norton AntiVirus Corporate Edition
Leftover registry keys from a previous version of Symantec or Norton AntiVirus Corporate Edition can cause this problem. Delete the registry keys and then install Symantec AntiVirus again.


WARNING: In the next steps you will edit the Windows registry. Back up the registry before you make any changes to it, because incorrect changes to the registry can result in permanent data loss or corrupted files. Modify only the registry keys that are specified.
For instructions, see How to back up the Windows registry.


To delete the registry key
  1. On the Windows taskbar, click Start > Run.
  2. In the Open box, type the following text:

    regedit

  3. Click OK.
  4. In the Windows Registry Editor, in the left pane, click My Computer.
  5. On the Edit menu, click Find.
  6. In the Find what box, type the following text:

    VirusProtect6

    Delete all keys and values that contain this string.
  7. Go to and delete the following key:

    HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\DLLUsage\VP6

  8. Exit the Windows Registry Editor.

If the problem persists, manually remove the previously-installed version of Symantec AntiVirus. To find directions for your product version, read Manual uninstallation documents for Symantec Client Security products.







Legacy ID



2001010315571848


Article URL http://www.symantec.com/docs/TECH99099


Terms of use for this information are found in Legal Notices