Troubleshooting Symantec Endpoint Encryption Device Control: GPO Client Installation Unsuccessful.

Products

• Symantec Products

Issue/Introduction

The client is not successfully installed on the target machine using group policy object.

Cause

This could be occurring for the following reasons:

Resolution

• The client installation GPO is not linked with the appropriate OU, which can be determined by running gpresult on the target machine, then verifying that the GPO is applied on the machine. Link the installation GPO to the appropriate OU where the target machine resides and replicate any domain controllers in case multiple domain controllers exist.
• The target machine does not have sufficient privileges to read from the GPO, which is determined because an MsiInstaller error will appear in the event viewer log. Verify that the folder where the client MSI installation package resides is shared and all authenticated users have read access.
   

Perform a reboot, or make sure to enable the "always wait for the network At computer startup and logon" option in the installation GPO. The Log On optimization is enabled on a Windows XP machine, which is determined because a synchronization error will appear in event viewer log.