Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Install Endpoint Client - Unexpected Error Access Denied

Created: 31 Jan 2014 | 8 comments

I was wondering if anyone has seen this issue or if its a known issue.

When deploying the Symantec Endpoint Client, the following message is thrown:

An error prevents this program from continuing:

Unexpected error.  Access is denied

Now this happens when there is no logged in user, and we push the setup out using Symantec Management Server.  If there is a user logged in the install will continue as expected.

The account used to install the software has local admin rights on the target computer.

Any insight would be great!!!

Operating Systems:

Comments 8 CommentsJump to latest comment

.Brian's picture

What's the exact version this is happening with?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

raju123's picture

Their may be issue with group policy of that client, rejoin the client on domain and try.

Similar type of issue happen in one of my site which resolve after rejoining. 

James007's picture

Prepare Windows Vista, Windows Server 2008, or Windows 7 computers: Windows User Access Control blocks local administrative accounts from remotely accessing remote administrative shares such as C$ and Admin$. You do not need to fully disable User Account Control on the client computers during the remote deployment if you disable the registry key LocalAccountTokenFilterPolicy. For more information, see the following Microsoft Knowledge Base article: http://support.microsoft.com/kb/951016

If the Windows client computer is part of an Active Directory domain, you should use domain administrator account credentials for Remote Push.

In addition, perform the following tasks:

  • Disable the Windows Firewall, or configure the firewall to allow the required traffic.
  • Disable the Sharing Wizard.
  • Enable network discovery by using the Network and Sharing Center.
  • Enable the built-in administrator account and assign a password to the account.
  • Verify that the account has administrator privileges.
  • Disable or remove Windows Defender

Steps to prepare computers to install Symantec Endpoint Protection 12.1.x client

Article:TECH163112  |  Created: 2011-06-23  |  Updated: 2014-01-15  |  Article URL http://www.symantec.com/docs/TECH163112
raju123's picture

Please update the current status in thread or mark as Solved with the helpful one.

.Brian's picture

Send the OP a follow up PM if you need status please. This allows the forums to stay clean with helpful comments only.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.