Data Loss Prevention

Hello guys

Please if anyone pass though this issue na

We deploy the client of DLP 14.5 MP1 (build 14.5.100.1060), the deploy was concluded with successfully, we using SCCM for deploy.The installagent.log not have any warnings or errors about this distribution, the services edpa and wpd is running with startup mode automatically.

However, when the user try send an e-mail they box of DLP client agent installation appear and they not can send to email even close and cancel this box.

The same problem happens when the user try, copy and paste, rename folder or files, and I try a lot things but doesn’t working yet.

Three events is created in event viewer always when the user try doing some actions; one event is warinign, information and error.

I try remove using cleanget and agent cleanup, and remove all files with not was removed for uninstall process.

We try run sfc /scannow, disable UAC, remove the SEP 12, running the installation with elevated privileges using domain admin (crazy), I did this a lot times, in a lot machines but any thigs what a made not solve this problem.

A most stranger is the problem happens only with the user is machine owner, this user in logged on in the machine when the process of deploy was started. I request the user “A” login in another machine with have the same problem with other user “B” when  the user “A” login in the machine de user “B” the problem not happens, I think the problem is in the user profile, and I recreate the profile user in the machine but the same problem happens.

If anyone can help a with the anything I appreciated.

There are more obvious MSI errors than the sticky 1608 we face normally. However there were a few instances wherein we had successfully resolved 1608 without making major changes like re-image or new-imaging. In one such cases, the below article had helped us:

https://www.symantec.com/connect/articles/understanding-error-1603-fatal-error-during-installation

Redownload the the agent binaries from Fileconnect, regenerate the package from Enforce and ensure you run the .bat file from administrator command prompt when installing manually.

Thanks Leadvue for you help, I peform some actions but not working yet.

I did this not solve the problem.

thanks a lot for your help.

Hello guys

Thanks alot for your help.

I solved the issue excluding some registry keys from users, the deploy using the SCCM create registry keys in HKEY_USERS, these keys is not created when the DLP client is deployed using Altiris, psexec or others tools. 
Was needed exclude some keys in HKEY_LOCAL_MACHINE, This keys were not excluded using cleanagent or agentcleanup.

User Key was excluded.

    REG DELETE "HKU\%%a\Software\Microsoft\Installer\Features\1192F2AF43C43B640A0289ED23AC07E5" /f
    REG DELETE "HKU\%%a\Software\Microsoft\Installer\Products\1192F2AF43C43B640A0289ED23AC07E5" /f
    REG DELETE "HKU\%%a\Software\Microsoft\Installer\UpgradeCodes\A7288D8F16C4659468C66EA6B6030E2A" /f
    REG DELETE "HKU\%%a\Software\Microsoft\Installer\Win32Assemblies\Global" /f

Machine Key was excluded.

    REG DELETE "HKLM\SOFTWARE\Classes\CLSID\{31FC81A1-8A8B-41B1-B1E6-2111A1D252B3}" /f
    REG DELETE "HKLM\SOFTWARE\Classes\Interface\{FB2BEA44-E97C-4C00-9285-F0DBD6627CBF}" /f
    REG DELETE "HKLM\SOFTWARE\Classes\TypeLib\{F7B6EB60-F6E8-4F79-BE05-A759195CA626}" /f
    REG DELETE "HKCR\Installer\UpgradeCodes\A7288D8F16C4659468C66EA6B6030E2A" /f
    REG DELETE "HKCR\Installer\Products\1192F2AF43C43B640A0289ED23AC07E5" /f
    REG DELETE "HKLM\SYSTEM\CurrentControlSet\Services\vfsmfd" /f
    REG DELETE "HKU\%%a\Software\Microsoft\Installer\Win32Assemblies\Global" /f

I put this in a GPO for exclude these keys, after this the problem was solved.