Unable to install Symantec Endpoint Protection Manager with limited account using elevated Windows installer privileges

Products

• Endpoint Protection

Issue/Introduction

You enable a policy to allow the Windows installer to install with elevated privileges. An installation attempt with an elevated privilege account results in the following error during installation "Symantec Endpoint Protection Manager can only be installed by an administrator" or "The system administrator has set policies to prevent this installation."

Symptoms
Installation fails when attempted using elevated privilege account for Windows Installer

Cause

MSI policies do not influence server configuration assistant.

Resolution

The installation of the Symantec Endpoint Protection Manager is divided into two parts. The second part, the server configuration assistant, runs after the MSI installer has completed. The server configuration assistant is not MSI controlled and the MSI policy that is enabled has no influence over this part of the installation. The server configuration assistant cannot be elevated using MSI mechanisms and thus the installation fails.

You must be logged in to Windows as an administrator to install the Symantec Endpoint Protection Manager.