TkFast Logo

View FAQ
Print Version

- Software -


(posted by on 2015-08-10 16:28:03)
Symantec Manager installer gives user rights problem in domains ...

problem:


Error message:


"Symantec Endpoint Protection Manager services require user rights in Windows domain security policies.  The management console cannot run until you assign user rights to the services in the specified policies:


Group policy setting SeServiceLogonRight in 'Default Domain Controllers Policy' does not contain account(s) [NT SERVICE\semsrv, NT SERVICE\semwebsrv]


Click Cancel to exit the installer.  Click Try Again to have the installer recheck the domain policy settings. Click Continue if you are certain that the domain policies do not override local policies on this system.


Based on your databse configuration later, you may need to assign additional user rights."


Solution:

    solution:


    Open command prompt, run "sc showsid semsrv" and "sc showsid semwebsrv" and copy the SIDs.


    Open Group Policy Management, Default Domain Controllers Policy


    Computer Configuration > Policies > Windows Settings > Security Settings > User Rights Assignment


    Open "Log on as a service" and click Add User or Group, paste the SIDs one at a time.  Click OK, and close GPM.


    Run gpupdate /force, then click Try Again on the Symantec Installer.


     


    Sources:


    https://support.symantec.com/en_US/article.TECH228988.html


    http://peter-kline.com/?p=139




Industries

Broadcast
Corporate
Education
Event Centers
Healthcare
Home Theater
Hospitality
House of Worship
Museums
Residential
Retail


Solutions

Computer
Automation
Web
Phone

Explore

Accolades
Testimonials
Automation Portfolio
Web Portfolio
Design Portfolio

About

Company Info
Staff
Corporate Partnership
News & Events

Contact

TkFast, Inc.
437 South Hydraulic Street
Wichita, KS 67211-1911

Phone: 316-260-2500
Toll Free: 877-TKFAST-1
Fax: 316-260-4242

info@tkfast.com




©2020 TkFast, Inc. All Rights Reserved.  |  Privacy Statement  |  Site Map