ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

C:\Windows\Temp folder's permission is changed by SEPM installation.

book

Article ID: 161585

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

If Symantec Endpoint Protection Manager (SEPM) included SEP 12.1 RU5 is installed by user who has "C:\Windows\Temp" for TEMP/TMP environment variables, "C:\Windows\Temp" folder's permission is changed during SEPM installation.
As the result, SEPM console doesn't appear.

Cause

"C:\Windows\Temp" has all non-inherited permissions. By installation of SEPM RU5, these settings has removed.

Resolution

Workarounds

A. Install by another administrative user who has default TEMP/TMP variables. 

B. Enbale temporary folders for sessions available while installing SEPM to make sure installer will not change ACLs of C:\Windows\Temp.

1) Go to following location in registry

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server

and set following keys' values: 
  fDenyTSConnections : set to 0. 
  fSingleSessionPerUser: set to 1. 
 PerSessionTempDir: set to 1.

2) Log-Off from machine and re-login.

3) Go to following location in registry

HKEY_CURRENT_USER\Volatile Environment\1 or HKEY_CURRENT_USER\Volatile
Environment\2 or HKEY_CURRENT_USER\Volatile Environment\3

and make sure following keys are present 

TEMP 
TMP

4) Start Installing SEPM.