Endpoint Protection Small Business Edition

 View Only

  • 1.  Can't install SEP 12.1.14 locally

    Posted Apr 27, 2014 10:56 PM
      |   view attached

    Run SymantecEndpoint_12.1.4_MP1_Win32Client with setup.exe, it can't execute.

    Tried to run sep.msi, it started to install, but end up with error message : "Symantec Endpoint Protect (SepMaster Service) can't start. Please make sure you have enough permission"

    Tried to run sep.msi with both local and domain administrator, same error msg.

     

    Attachment(s)

    doc
    Can't start SEP.doc   146 KB 1 version


  • 2.  RE: Can't install SEP 12.1.14 locally

    Posted Apr 27, 2014 11:21 PM
    See the attach SEP installation issue Error 1920 (SepMasterService) failed to start http://www.symantec.com/docs/TECH187151


  • 3.  RE: Can't install SEP 12.1.14 locally

    Posted Apr 27, 2014 11:35 PM
    Solution: Below are three possible resolutions:
    • Either a combination of, or any one of these resolutions may work.
    • It is possible that all three Resolutions will need to be followed before the problem is corrected.
    • Resolution 1
      1. Click Start
      2. Click Run.
      3. Type regedit
      4. Click OK.
      5. Navigate to the following subkeys:
        • HKEY_LOCAL_MACHINE\Software\Intel
        • HKEY_LOCAL_MACHINE\Software\Symantec
        • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
        • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths
        • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
           
      6. For each of these keys, ensure that "Administrator", "Administrators" and "System" have Full Control.
      Warning: If all of the groups: "Administrator", "Administrators" and "System" have Full Control, DO NOT CHANGE ANYTHING, instead proceed to Resolution 2.



      Resolution 2
      The Trusted Publishers Properties must have "Allow the following users to Select Trusted publishers" configured to "End Users." To change this setting follow the below steps:
      1. Go to Default Domain Controller Security Settings> Software Restriction Policies> Trusted publishers
      2. Change the settings from "Enterprise Administrators" to "End Users."
        • This sets AuthenticodeFlags = 0 under the following registry locations.
          • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer\AuthenticodeFlags
          • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPublisher\Safer\AuthenticodeFlags
          • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer\AuthenticodeFlags
             
      3. Perform the following: gpupdate /force, to force a refresh of the Group Policy on the AD Server.
     
    • Resolution 3
      If the CustomSD entry for the Application Eventlog has been modified, then the "Symantec Settings Manager" will not be able to read/write to that Application Eventlog.

      Please read and follow the directions in the following Microsoft document to ensure that the CustomSD entry for the Application Eventlog is set to default:
      "How to set event log security locally or by using Group Policy in Windows Server 2003" at URL: http://support.microsoft.com/kb/323076


     

      References: "How to set event log security locally or by using Group Policy in Windows Server 2003" at URL: http://support.microsoft.com/kb/323076

      http://service1.symantec.com/SUPPORT/ent-security.nsf/7bc18d1a4d5824eb882573410063493f/1b2e84935a72a896652573c40078a0b4?OpenDocument



    • 4.  RE: Can't install SEP 12.1.14 locally

      Posted Apr 28, 2014 12:57 AM

      Check the simphon comment

      https://www-secure.symantec.com/connect/forums/sep-installation-issue-error-1920-sepmasterservice-failed-start

      Error: "1920 Service Defwatch failed to start. Verify that you have sufficient privileges to start system services

      http://www.symantec.com/business/support/index?page=content&id=TECH99099



    • 5.  RE: Can't install SEP 12.1.14 locally

      Posted Apr 28, 2014 06:32 AM

      Have you tried running cleanwipe?



    • 6.  RE: Can't install SEP 12.1.14 locally

      Posted Apr 28, 2014 07:10 AM

      Right click on setup.exe -select properties -  and select unblock option and then run it.



    • 7.  RE: Can't install SEP 12.1.14 locally

      Posted May 07, 2014 02:12 AM

      Have you applied the article on system?

      SEP installation issue Error 1920 (SepMasterService) failed to start

      Article:TECH187151  | Created: 2012-04-24  | Updated: 2013-04-23  | Article URL http://www.symantec.com/docs/TECH187151


    • 8.  RE: Can't install SEP 12.1.14 locally

      Broadcom Employee
      Posted May 07, 2014 03:02 PM

      Hi,

      Thank you for posting in Symantec community.

      What is the operating system? 

      Check the SEP_Inst.log file under %temp% directory.

      In a text editor, open the log file that the installation generated.

      To find failures, search for the following entry:

      Value 3

      The action that occurred before the line that contains this entry is most likely the action that caused the failure. The lines that appear after this entry are the installation components that have been rolled back because the installation was unsuccessful.



    • 9.  RE: Can't install SEP 12.1.14 locally

      Posted May 28, 2014 02:52 AM

      Your requirement complete or do you need any more help?



    • 10.  RE: Can't install SEP 12.1.14 locally

      Posted May 31, 2014 01:57 AM

      Run http://support.microsoft.com/kb/822798/en-us, but no help

      Run cleanwipe, it can't start ... run with administrator ....still it can't start

      Tried to install other antivirus software, also it can't start

      Even online scanner, it can't run...