Endpoint Protection

Hi,

Hope somebody can help me. I have Symantec Endpoint Protection Manager 11.3 and the client installation package are 11.4. The network computers use to be 11.1. The problem is that after i made the client upgrade, now the client icon shows like a stop sign on the taskbar, when i tried to open the client it shows the OK green icon but uder that it says "No Symantec Protection Technologies are installed". Also the "scan for threats"option is grayed out. That's if i log in as a restricted domain user, but if i log in as a admin user everything its ok. Whats the catch there? I'll apreciatte any help.

What are the exact builds you are using? Click on the Help and Support button> About, to show the client version. Can you run the support tool to gather more info.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008071709480648

Thomas

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/5ef8ff3ba47478c98025759f00506876?OpenDocument

The client build is 11.0.4000.2295, and the management console build is 11.0.3001.2224. I atteched to my original post a couple of images of my problem. The two client images are from the same computer but log in as different users, and thats my problem when i log in as a restricted user i dont see anything installed and like i mention the icon on the taskbar shows a stop sign. In the other hand, if i log in to the same computer as a admin user, everything looks ok. And if i go to the management console, and i look to the problematic computer ( every single one of the client computer) and theres a restricted user log in, the console dont show any problem it just shows the client computer with an ok status. I hope somebody can help me :( .

Are there any policy that prevents users from accessing SEP? Like, is there an icon on the lower right if it was a non admin account?

Can you be more clear? I'm not sure what you meant.

In the client's PC. Do you see the SEP shield in the lower right using a non-admin ID to logon. And using that same account, were you able to make changes to the settings of the SEP client?

And the other one is what policy is currently used. Open up SEPM in the server, after logging on, click on policies and check that as a first step. There are also other settings in the Client.

It seems that the problem is my GPO policy, because if a create a new Domain user, without the policy...everything works ok, but once i apply the policy the problem start and not only that, if i remove the policy from the newly created user the problem stay. The question is, what part in the policy could be messing around with Symantec endpoint?

 Computer confiuration - Windows Settings - Security Settings -User rights assinment

And check at what all levels have you denied local users or allowed just administrators

I really need your help with this guys, i tried it all. I know is the GPO policy, but what i dont get is that once i remove the policy the problem continue. Let me explain: if i create a new user without the policy, everything works just fine, then if i apply the policy to the user the problem start....you fololw me right? Now, once i remove the policy from the user, everything should work fine, cause the problem was the policy, but nooooooooo the problem stay even after removing the policy. So...once i have apply the policy, it seems theres no way to reverse it even if I remove the policy. I even tried this:
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/5ef8ff3ba47478c98025759f00506876?OpenDocument
but no luck either, the permissions seems fine to me. WHAT COULD IT BE????

Maybe the group policies haven't refreshed yet? unless you did a gpupdate? By default I believe it updates every 90 minutes.

The policy was refresh alright. I used gpupdate /force and after that i  used gpresult to confirm that the policy was remove, but the problem is still there.

Hi Elisamuel. As Cycletech mentioned in the previous entry, Support has a Support Tool that you can download and upload the results to Support for analysis. However, I'm not sure if this particular tool checks for GPO's. We have another tool that Support uses called "Symbatch" and it checks for issues with GPO's. I would recommend calling Support and perhaps this tool will help identify the problem.

It seems the problem is my group policy. Theres has to be something i'm blocking on the policy that prevents SEP from showing the green dot ok status and the technologies installed. Cause if i remove the policy and recreate the user profile everything work ok, its when i apply hte policy that all heck brake lose. Does anybody know what should i allow on my group policy so that SEP work ok.

P.S.
The Rtvscan is running, and the SEP seems to be doing his work, its the status that its all mess up.
I also added a pdf print of my policy, please check it maybe you can see the problem.

I am not seeing anything in the policy that may be causing the issue. I would recommend that you open a case with support to get this resolved.

Thomas