Endpoint Protection

Hi
This is realy a problem as I am unable to install hp printer and scanner driver where sep client is installed. although I stop symantec by smc -stop and try to install the driver but still get error.same goes for oracle installation also.  I have blocked autorun.inf and blocked running exe file from external media . so i use smc -stop to install from cd but no use.
how to solve to solve this. in windows xp if i use smc -stop and install hp driver it works fine but on vista it gives problem.

What is the type of account you have logged in to when you try to install the HP driver on a Vista machine.  
Try using a different Admin account

Under group policies check for "Prevent vulnerable Windows processes (lsass, spoolsv, csrss, smss) from writing code". If it is so enable it and then try the installation again of course after disabling the smc service

I have cheked with both administrator account and user account with admin rights.

I Have also disabled User Account Control in windows vista.

Could you  please  stop all the  Symantec servcies, and then try installing?

Tried that also. this problem happening only on vista systems not xp machines.

Could you  please uninsatll SEP client, and then insatll drivers?

tried that and it did installed sucessfuly. but do i have to uninstall sep every time.

What is the version of SEP? And what features of SEP are installed? Is it a managed client, or a self managed client?
Do you have any device control policy setup, if  it is a managed  client?

http://service1.symantec.com/support/ent-security.nsf/docid/2009041511240948?Open&seg=ent

My solution is to create a "software-install" group in SEPM.
The rules are more lax there in that group.
I "move" the clients from the normal strict group to the software install group, do the install, then move them back.
This has solved all install issues............. and no need to stop and start services.

Have you tried installing "additional print drivers" directly on the Print Server, instead of runnning from the CD?
Connect to the Print Server and the driver installation should run just fine.

Example for Server 2003:
http://technet.microsoft.com/en-us/library/cc784964(WS.10).aspx

probably a stand-alone all-in-one and not a network printer.
We've got a number of these in small offices........... you can just install drivers-only, however, and not run the crappy hp install that puts a lot of junk on the PC anyway...
In the past, HP even installed spyware on the local computer than relayed info back to HP. We ended up removing almost half of what HP's junky installs put into our computers, including their update scheduler, etc.
(one reason I no longer like HP printers is the junk and their really poor install. It used to be unless you chose the entire "suite" you could not use their scanners!)

Hi
If I create a software Install group the what are the rules/settings that I should look for change for installation of drivers and softwares.

Hi
If I create a software Install group the what are the rules/settings that I should look for change for installation of drivers and softwares.

Hi Vishal

uninstalling Sep and installing the hp softwares is not a solution it's an workaround .I need a permanent solution as I can't go to each and every desktop to remove sep for printer installation.
please provide a solution which i can configure on sepm to allow software insallations like oracle and hp printers. small softwares are installing fine.

Make sure in software install group
There is no App n Dev control policy applied.
No Firewall Policy applied and Tamper Protection is OFF.

Installation should go smooth.