SMSMSE is installed to a Exchange 2010 Mailbox role server. When the SMSMSE service is started,  the following error message is displayed:

Windows could not start the Symantec Mail Security for Microsoft Exchange service on Local Computer. Error 1609: The service did not start due to a logon failure.
 

Conditions

• Service account does not have "Log on as a service" permissions.

1. Determine the service account used to run the SMSMSE service (see section "To verify the account that the SMSMSE service is using" below).
2. On the Windows taskbar click Start > Administrative Tools > Local Security Policy.
3. In the left pane expand Local Policies and click User Rights Assignment.
4. In the right pane right click Log on as a service and then click Properties.
5. The Local Security Settings are displayed. If the SMSMSE service account is not listed then this condition is met.

The service account used by SMSMSE requires the "Log on as service" permission.

To verify the account that the SMSMSE service is using
 

1. On the Windows taskbar, click Start > Run.
2. Type services.msc, and then Click OK.
3. In the right pane, right-click the Symantec Mail Security for Microsoft Exchange service, and then click Properties
4. Click the Log On tab.
5. Make a note of the domain account entered under the This account: field - referred to from this point as "service account."

To assign the needed rights to the service account

1. On the Windows taskbar, click Start > Administrative Tools > Local Security Policy.
2. In the left pane, expand Local Policies and click User Rights Assignment.
3. In the right pane, right click Log on as a service and then click Properties.
4. Click Add user or Group, type in the service account name and then click OK.
5. Verify that the service account is now in the list of users and click OK.

To verify the service account is a member of the "Administrators" group on the local machine

1. On the Windows taskbar, click Start > Administrative Tools > Active Directory Users and Computers.
2. In the left pane, expand <your domain>, and then click Users.
3. In the right pane, find the service account that you verified earlier.
4. Right-click the service account and then click Properties.
5. Click the Member Of tab, and click Add.
6. In the "Enter the object names to select" field, type administrators.
7. Click Check Names.
   Administrators should now be underlined.
8. Click OK.
9. Click Apply then click OK.
   
   

You should now be able to start the SMSMSE service.




References
Permissions considerations for the Symantec Mail Security for Microsoft Exchange 6.5 service account

When editing a manual scan in Symantec Mail Security for Microsoft Exchange 6.5 installed on Exchange 2010 mailbox servers, the mailbox and public folder list is not populated.
During a manual scan on an Exchange 2010 Mailbox server, the scan stops and no messages are scanned