Best practice for GPO applied on Endpoint Protection Services.
book
Article ID: 158891
calendar_today
Updated On:
Products
Endpoint Protection
Issue/Introduction
Following are few issues observed with Symantec Endpoint Protection (SEP) / Symantec Endpoint Protection Manager (SEPM):
Cannot open the SEP user interface.
SEP Client showing malfunctioning on the client GUI.
SEP Client does not take content updates from SEPM / LiveUpdate Administrator (LUA).
Clients are unable to send the correct information to the SEPM causing reporting discrepancies.
When attempting to open the SEPM Console GUI, following error is displayed: "A Java exception has occurred". If the console is opened using "Run as Administrator" it will open normally.
Cause
GPO policies is applied as part of System hardening on some or all of the SEP/SEPM services
Resolution
Some of the following restrictions can cause issues with normal SEP functionality and not supported:
Restricted account settings with regards to any of the system and admin-created user accounts.
Altering the system or user accounts that SEP/SEPM uses.
Any GPO access to any SEP/SEPM services. "Not configured" is the only supported GPO parameter