Endpoint Protection Manager installation fails after GPOPolicyReview
search cancel

Endpoint Protection Manager installation fails after GPOPolicyReview

book

Article ID: 164416

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

When attempting to install the Symantec Endpoint Protection Manager (SEPM), the installation fails when running the GPOPolicyReview.  

MSI (s) (08:C8) [19:41:46:749]: Invoking remote custom action. DLL: 
C:\Windows\Installer\MSIE076.tmp, Entrypoint: GPOPolicyReview
Beginning Windows group policy check.
60797856 0 1.251e-293 52423596 00000011000111111110100100010000 ̟鞒潹 
1870186136 ̟餃珄 00000011000111111110100100111100 좋䖋擨£ 6f78c698 31ff578 
CustomAction GPOPolicyReview returned actual error code 1603 (note this may 
not be 100% accurate if translation happened inside sandbox)
Action ended 19:41:47: InstallFinalize. Return value 3.

Cause

The installation runs "gpresult /scope COMPUTER /f /X gpresult.xml" during the installation to determine the currently assigned group policies.  If this command takes longer than 5 minutes to run, the installation will fail.  

Resolution

As a workaround, use a local account where gpresult takes less time or troubleshoot current domain policies to reduce complexity in applying GPOs.