Endpoint Protection

I have installed SEP 11.0.6 via the Deployment wizard to workstations that are runing Windows XP SP3 and SAV 9.0.4.   99% of the computers have a successful install, but occasionally on some of them, SEP loops and shows the following:

"Please wait while windows configures Symantec Endpoint Protection."

When any USER logs in to our domain on the computer in question ,the installer runs and loops, and it takes several times clicking CANCEL to make it stop, making the computer very difficult for the end user to use.

One thing I have discovered is that if a user with domain admin credentails(or local admin) logs onto the computer, the installer never runs and SEP works normally.  

This appears to be a permissions problem but after checking permissions, the USER group for our domain has access to all of the Symantec folders.  The really baffling quesition is, why only a small percentage of users?

One way I have found to rectify the situation is to re-image the computer in question and reinstal SEP.  Everything is happy when I do that, but obviously that is not always going to be a viable solution.

Anyone ever experienced this, I really have to get this solved for the small minority of my users that have this issue?  I have spent several hours Googling and trying all of the suggestions I have seen,  but none have worked so far.

Thanks! 

Title: 'Installation goes into a continuous loop when migrating Symantec Endpoint Protection'
Document ID: 2009092412054248
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2009092412054248?Open&seg=ent

I can reproduce this quite easily.
The problem is related to one of 2 things:
- The First is RIGHTS
- The Second is Access on the local drive.

* * * * * * *
Here, what I can do to produce this problem is run a CHKDSK /X d: (to dismount the drive) on any system.

My user profiles being in D:\Profiles instead of on the C:\documents and settings

Once the system no longer has read/write access to the "local profile" of the user, the system goes into a loop until the drive comes back into accessible form.

Make sure your "local user" has WRITE or FULL rights on his locally stored profile.
In case of roaming profiles, ensure the same as above.

C:\documents and settings\[username]

this is how resolved on one of the machines
when you get the please wait message do not close or cancel it
open task manager
end ccapp.exe
rtvscan.exe
smc.exe
whatever you find as symantec process.
it wil complete the installl , wil be installed fine

Thank you gentlemen, I will try these solutions and hopefully one of them will work!

The local USERS group did not have READ rights to access C:\Windows\System32 for some strange reason, which explains why anyone with adminstrative rights did not experience the installer loop.

 

Thanks for all of your suggestions.