During the install/upgrade of the Symantec Endpoint Protection Manager (SEPM) the installation hangs for a period of time at the status of “Reviewing Windows Security Policies” then rolls back.
Windows user is likely a member of too many security groups which causes the install to time out while trying to review all of the associated Windows policies.