After the Symantec Endpoint Protection (SEP) client is installed SEP reports multiple problems in the Windows Notification Area (System Tray).  The SEP client user interface states there are no problems detected.

Notification Area popup from Endpoint Protection stating there are multiple errors.

Insufficient DCOM access permissions.

Verify that the “DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax” policy is modified to add “ANONYMOUS LOGON” and “Administrators” to the Access Permissions.

1. Start->Run…
2. Type: secpol.msc
3. Click OK
4. Under Security Settings, expand Local Policies
5. Expand Security Options
6. Edit the “DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax” policy
7. In the Security Descriptor field, click Edit Security…
8. Ensure that at least ANONYMOUS LOGON and Administrators are present
9. Ensure that Local Access and Remote Access are checked for these two accounts
10. Click OK
11. Click OK
12. Restart the machine