ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

C:\Windows\Temp folder's permission is changed by SEPM installation.


Article ID: 161585


Updated On:


Endpoint Protection


If Symantec Endpoint Protection Manager (SEPM) included SEP 12.1 RU5 is installed by user who has "C:\Windows\Temp" for TEMP/TMP environment variables, "C:\Windows\Temp" folder's permission is changed during SEPM installation.
As the result, SEPM console doesn't appear.


"C:\Windows\Temp" has all non-inherited permissions. By installation of SEPM RU5, these settings has removed.



A. Install by another administrative user who has default TEMP/TMP variables. 

B. Enbale temporary folders for sessions available while installing SEPM to make sure installer will not change ACLs of C:\Windows\Temp.

1) Go to following location in registry

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server

and set following keys' values: 
  fDenyTSConnections : set to 0. 
  fSingleSessionPerUser: set to 1. 
 PerSessionTempDir: set to 1.

2) Log-Off from machine and re-login.

3) Go to following location in registry

HKEY_CURRENT_USER\Volatile Environment\1 or HKEY_CURRENT_USER\Volatile
Environment\2 or HKEY_CURRENT_USER\Volatile Environment\3

and make sure following keys are present 


4) Start Installing SEPM.