can you mention the event id related to this message. Also you can check the scm-server-0.log ( locate d in program files\symantec \symantec endpoint protection manager\tomcat\logs) for the message and copy it here.

did you change the port. Is the required services running ( IIS and DB)?

My suggestion SEPM should not be installed on XP OS. :-)

Symatec service stopped with event id 5

The Java Virtual Machine has exited with a code of -1, the service is being stopped.event id :4096

The Symantec Endpoint Protection Manager service entered the stopped state.event id:7036
and the IIS service is running

the log file info is here

2009-06-19 11:55:24.085 SEVERE: ================== Server Environment ===================
2009-06-19 11:55:24.085 SEVERE: os.name = Windows XP
2009-06-19 11:55:24.085 SEVERE: os.version = 5.1
2009-06-19 11:55:24.085 SEVERE: os.arch = x86
2009-06-19 11:55:24.085 SEVERE: java.version = 1.5.0_15
2009-06-19 11:55:24.085 SEVERE: java.vendor = Sun Microsystems Inc.
2009-06-19 11:55:24.085 SEVERE: java.vm.name = Java HotSpot(TM) Server VM
2009-06-19 11:55:24.085 SEVERE: java.vm.version = 1.5.0_15-b04
2009-06-19 11:55:24.085 SEVERE: java.home = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\jdk\jre
2009-06-19 11:55:24.085 SEVERE: catalina.home = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat
2009-06-19 11:55:24.085 SEVERE: java.user = null
2009-06-19 11:55:24.085 SEVERE: user.language = en
2009-06-19 11:55:24.085 SEVERE: user.country = US
2009-06-19 11:55:24.085 SEVERE: scm.server.version = 11.0.3001.2224
2009-06-19 11:55:26.101 SEVERE: ================== StartClientTransport ===================
2009-06-19 11:55:26.226 SEVERE: Unknown Exception in: com.sygate.scm.server.servlet.StartupServlet
java.lang.Exception: HTTP 403 Access Forbidden, URL: http://localhost:8014/secars/secars.dll?action=34
at com.sygate.scm.common.communicate.Communicator.getRequestInputStream(Communicator.java:555)
at com.sygate.scm.server.util.ClientTransportHelper.startClientTransport(ClientTransportHelper.java:72)
at com.sygate.scm.server.servlet.StartupServlet.init(StartupServlet.java:104)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:880)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:768)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3484)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:3710)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:697)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:311)
at org.apache.catalina.core.StandardService.start(StandardService.java:450)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:2213)
at org.apache.catalina.startup.Catalina.start(Catalina.java:484)
at org.apache.catalina.startup.Catalina.execute(Catalina.java:371)
at org.apache.catalina.startup.Catalina.process(Catalina.java:134)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:151)
com.sygate.scm.common.communicate.CommunicationException: Unexpected server error. ErrorCode: 0x10010000
at com.sygate.scm.common.communicate.Communicator.getRequestInputStream(Communicator.java:576)
at com.sygate.scm.server.util.ClientTransportHelper.startClientTransport(ClientTransportHelper.java:72)
at com.sygate.scm.server.servlet.StartupServlet.init(StartupServlet.java:104)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:880)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:768)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3484)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:3710)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:697)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:311)
at org.apache.catalina.core.StandardService.start(StandardService.java:450)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:2213)
at org.apache.catalina.startup.Catalina.start(Catalina.java:484)
at org.apache.catalina.startup.Catalina.execute(Catalina.java:371)
at org.apache.catalina.startup.Catalina.process(Catalina.java:134)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:151)

Which JRE version u r using???

Hi,

here's the significant error:
HTTP 403 Access Forbidden.
Unfortunately in this log we cannot see the sub-code error to correctly identify it:
http://support.microsoft.com/?scid=kb%3Ben-us%3B31...

To check it you should enable and analyze the IIS logs.
On Windows XP the most common one is 403.9 - Too many users.
How many clients did you deploy? XP cannot manage more than 10 connections. In SEP change the communication settings from push to pull mode.

yup, agree to Giuseppe.Axia.

Also check the IIS configuration is iusr_servername is applied and access is availiable to anonymous.

Dear pete
I found this issue at several places and in most of the cases it was related with the JRE. Offcourse the IIS has a big role in it

Please post your JRE version. and IIS logs.