Video Screencast Help

No Protection Technologies are installed

Created: 06 Jun 2011 | 5 comments

 

Seem that nearly all my non-administive users are not getting protection technologies from SEP.

i've tried the solution on the links below but there are no such policies on any GPO

http://www.symantec.com/business/support/index?page=content&id=TECH96475&actp=search&viewlocale=en_US&searchid=1301374389938

also tried another solution from below, but no result.

http://www.symantec.com/business/support/index?page=content&id=TECH93564

 

 

my SEP is 11.0.6005.562 installed on server 2008 r2

i have XP, vista and window 7 computers

 

Tried to uninstall then reinstall the client antivirus package but its still the same

 

one of the solution that work temporarily is change the registry 

 

HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing

and change the value data from

63c00 to 23c00

then i've restart my computer and all my technologies are back but when restarting again my computer, the reg values goes back to 63c00 and "No Protection Technologies are installed" again

 

please HELP

 

Comments 5 CommentsJump to latest comment

P_K_'s picture

Do you have AVYA One X Commuincator installed?

In the event viwer do you see

Event ID: 59
Source: SidebySide

Event ID: 32
Source: SidebySide

MCT MCSE-2012 Symantec Technical Specialist (SCTS)

tonks2907's picture

no communicator was installed on any  of my pcs

P_K_'s picture

Any errors in the event viewer?

MCT MCSE-2012 Symantec Technical Specialist (SCTS)

dcats's picture

It seems you some GPOs applied causing this issue. Check if you have one of these:

 

  • “Enable trusted publisher lockdown”
  • Software Restriction Policies > Trusted Publishers

Check it with Start > Run > rsop.msc

 

External reference: http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/a2f5ae71-c4e8-4523-8817-dbc9161396a1/

"(...)The Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing

Only affect "Check for publisher's certificate revocation" settings.(...)"

Mithun Sanghavi's picture

Hello,

Try Installing Microsoft Visual C++ 2005 x86 redistributable.

Install "Security Update for Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package (KB973923)". http://support.microsoft.com/kb/973923

Reboot the system.

 

Also, Please check if the affected clients are all a part of an OU  that had the "Trusted Publisher Lockdown" GPO  active.

There are two ways to resolve this,

1- Disable "Trusted Publisher Lockdown" in the assigned policies. 
2- Import the digital signatures for all of the SEP  components into the Trusted Publisher Store. The signatures can be found in the properties for each of the SEP  components. The following MSDN  article addresses how to make these changes to the Publisher Store
http://msdn.microsoft.com/en-us/library/ms172241.aspx

 

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.