Endpoint Protection Small Business Edition

I am using Symantec_Endpoint_Protection_and_Network_Access_Control_11.0.4_Trialware_AllWin_EN.zip. i have installed successfully with no errors but my Symantec Endpoint Protection is not able to login and giving me an error. i have also noticed that under administration tools-->Services-->Symantec Endpoint protection Manager is not able to start. i start it but it again gets stop after 3 seconds :(........
i also tried to change the password with the below procedure but no success....

• Change directory to the <Drive>:\Program Files\Symantec\Symantec Endpoint Protection Manager\Tools folder.
• Double-click the Resetpass.bat executable file. The password is reset to the default password.

Hello Zahid,

This error is not due to a wrong password so resetting the password will not help.

Here are the possible troubleshooting steps that may lead us to a resolution.

1. If this server is also a Domain Controller -

o Open the IIS Manager
o Expand Local Computer and then websites
o Right-click Symantec webserver and go to Properties
o Click on the Directory Security tab and click on the Edit button for Authentication and Access Control
o Put a check mark next to Integrated Windows Authentication
o Click ok on and close the IIS Manager
o Open the Services snap-in by going to start>Run> Type services.msc
o Start the Symantec Endpoint Protection Manager service
o Refresh the page a few times and see if the service stays started
o If it does then you should be successfully able to login to the SEPM console.

2. If SEPM is installed on a drive other than the C drive -

o Navigate to <drive>\Program Files\Symantec\Symantec Endpoint Protection Manager
o Right click on the SEPM folder and go to Properties
o Click on the Security tab
o Add Authenticated Users group with full control permissions
o Click OK
o Try to start the SEPM service
o It it remains started, you should be able to login to the SEPM console.

If the above steps do not help, please post the scm-server-0.log from the <drive>\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs directory for analysis.

Thanks.

i am sending you the scm-server-0.log


2009-07-30 10:48:57.562 SEVERE: ================== Server Environment ===================
2009-07-30 10:48:57.562 SEVERE: os.name = Windows 2003
2009-07-30 10:48:57.562 SEVERE: os.version = 5.2
2009-07-30 10:48:57.562 SEVERE: os.arch = x86
2009-07-30 10:48:57.562 SEVERE: java.version = 1.5.0_15
2009-07-30 10:48:57.562 SEVERE: java.vendor = Sun Microsystems Inc.
2009-07-30 10:48:57.562 SEVERE: java.vm.name = Java HotSpot(TM) Server VM
2009-07-30 10:48:57.562 SEVERE: java.vm.version = 1.5.0_15-b04
2009-07-30 10:48:57.562 SEVERE: java.home = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\jdk\jre
2009-07-30 10:48:57.562 SEVERE: catalina.home = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat
2009-07-30 10:48:57.562 SEVERE: java.user = null
2009-07-30 10:48:57.562 SEVERE: user.language = en
2009-07-30 10:48:57.562 SEVERE: user.country = US
2009-07-30 10:48:57.562 SEVERE: scm.server.version = 11.0.4000.2295
2009-07-30 10:48:59.156 SEVERE: ================== StartClientTransport ===================
2009-07-30 10:48:59.812 SEVERE: Unknown Exception in: com.sygate.scm.server.servlet.StartupServlet
java.lang.Exception: HTTP 503 Service Unavailable, URL: http://localhost:8014/secars/secars.dll?action=34
at com.sygate.scm.common.communicate.Communicator.getRequestInputStream(Communicator.java:556)
at com.sygate.scm.server.util.ClientTransportHelper.startClientTransport(ClientTransportHelper.java:72)
at com.sygate.scm.server.servlet.StartupServlet.init(StartupServlet.java:104)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:880)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:768)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3484)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:3710)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:697)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:311)
at org.apache.catalina.core.StandardService.start(StandardService.java:450)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:2213)
at org.apache.catalina.startup.Catalina.start(Catalina.java:484)
at org.apache.catalina.startup.Catalina.execute(Catalina.java:371)
at org.apache.catalina.startup.Catalina.process(Catalina.java:134)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:151)
com.sygate.scm.common.communicate.CommunicationException: Unexpected server error. ErrorCode: 0x10010000
at com.sygate.scm.common.communicate.Communicator.getRequestInputStream(Communicator.java:580)
at com.sygate.scm.server.util.ClientTransportHelper.startClientTransport(ClientTransportHelper.java:72)
at com.sygate.scm.server.servlet.StartupServlet.init(StartupServlet.java:104)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:880)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:768)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3484)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:3710)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:697)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:311)
at org.apache.catalina.core.StandardService.start(StandardService.java:450)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:2213)
at org.apache.catalina.startup.Catalina.start(Catalina.java:484)
at org.apache.catalina.startup.Catalina.execute(Catalina.java:371)
at org.apache.catalina.startup.Catalina.process(Catalina.java:134)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:151)



i also add to <drive letter>\program Files\symantecSEPM folder full writes for everyone

Seems like we got a problem with your IIS
try this,

open a browser
and
type
http://localhost

what do u get ? 

Page under construction or page cannot be displayed

if you get page cannot be displayed, that means IIS is not working.

Is it on 32bit or 64bit  ?box

if you get page cannot be displayed

uninstall and reinstall IIS,
do a repair of  SEPM from add / remove programs.

Hope this works. Good Day

Have you checked this

try this,

open a browser
and
type
http://localhost

what do u get ?

I did the below things but no success

when i open localhost i get a message in browser     "Service Unavailable"

its a 32bit machine

i uninstall/reinstall the IIS

i also repaired the SEPM from add / remove pregrams
---------------------------
 

• i also checked the integrated windows authentication
• i also confirmed that the Network Service is available in the Predefined under Application Pool-->Default application Pool-->properties-->identity

 

Now try to start SEPM service
will till it stops
and then go to IIS
and check the default application pool, does it get stopped?

Even error is event ID, will respect to DCOM ??

Rafeeq

1.) i start SEPM , it starts but within 3 sec it gets stop

2.) application pool is also stopped

3.) Error in Event VIewer

The Java Virtual Machine has exited with a code of -1, the service is being stopped. (Source semsrv, Event ID 4096)

The problem is being application pool getting stopped
try strating your app pool
and start SEPM
(suerly the SEPM service will stop)
Now check if app pool also gets stopped or not.
seems like something is crashing appool and we are not able to log in

Check your log, system log...you will definetly have DCOM errors
check all kind of logs in Eventviwer.

Rafeeq

go to properties of default application pool >> Identity tab >> Change the account to local system instead of Network Service (Note: this will eleveate the privileges) >> Start SEPM service >> Hopefully you will be able to login

Rafeeq

go to properties of default application pool >> Identity tab >> Change the account to local system instead of Network Service (Note: this will eleveate the privileges) >> Start SEPM service >> Hopefully you will be able to login

Rafeeq

i selected the local system but still no success

Anything error in your application log or system log?

There should be a Dcom error

Rafeeq

Yes under system log

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{A9E69610-B80D-11D0-B9B9-00A0C922E750}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20). This security permission can be modified using the Component Services administrative tool.

can you please guide me more deeper so i can do this what you are trying to say

thanks

Now do the following steps

1) Go to registry and look for this key {A9E69610-B80D-11D0-B9B9-00A0C922E750}

Check what it gives on the right hand side
Note down the service name, it should be IISADMIN I guess
now go to start-run- dcomcnfg.exe

you will get popup to register some keys ( same like above key)
click yes to that..


expand component services
expand my computer
and look for the services you got in step 1.

Add network service to add and give full control
try starting the app pool and also manager service and try to log in

What does you mean " and look for the services you got in step 1.  "

now go to start-run- dcomcnfg.exe

you will get popup to register some keys ( same like above key)
click yes to that..

expand component services
expand my computer
expand dcom config
and look for the IISADMIN
right click on that and click on properties and select security
in launch and activation add network service..


do iisreset and start default apppool and try log in to the manager.

My last suggestin

How did u install IIS?

in appool select , local service ( not local system )
start app and start sepm try to log in , if it fails

this is what i have


Try to reinstall IIS via:
> a) uninstall IIS (safe or normal mode)
> b) Remove files and folders
> %windir%/system32/inetsvr/
> /inetpub/
> %windir%/iisx.log (x=5 for w2k, 6 for XP, Win03)
> (use safe mode to delete)
> c) reboot, reinstall IIS,

hopefull it should work.

i did it successfully but still the service start for 3 seconds :(


But default is not stopping now !!!!


Now i am getting the error when i browse the Web of symantec from IIS

You are not authorized to view this page
You might not have permission to view this directory or page using the credentials you supplied.

--------------------------------------------------------------------------------

If you believe you should be able to view this directory or page, please try to contact the Web site by using any e-mail address or phone number that may be listed on the localhost:8014 home page.

You can click Search to look for information on the Internet.




 




HTTP Error 403 - Forbidden
Internet Explorer

 

Thanks Rafeeq.
The problem is resolved. i just remove the suggessted folders/logs of IIS and reinstall IIS and it works. even i did not add any service which you told in earlier post

We need add those services when default appool stops
we fixed that also right :)
I'm happy that issue is resolved... Have a good day
allah hafiz...:)