Unable to install Symantec Endpoint Encryption 11.3.1 MP1HF1 if Group Policy Management is not installed.

Products

• Endpoint Encryption
• Desktop Email Encryption
• Drive Encryption
• Encryption Management Server
• File Share Encryption
• Gateway Email Encryption
• PGP Encryption Suite
• PGP Command Line
• PGP Key Management Server
• PGP Key Mgmt Client Access and CLI API
• PGP SDK

Issue/Introduction

Not able to upgrade SEEM 11.3.1 MP1HF1.

Environment

SEEM 11.3.1 MP1HF1

 

Cause

Group Policy Management Feature was missing from the Windows Server.

Installation Log errors:

MSI (c) (A4!30) [11:55:11:485]: Creating MSIHANDLE (131) of type 790531 for thread 6960

System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.IO.FileNotFoundException: Could not load file or assembly 'Microsoft.GroupPolicy.Management, Version=2.0.0.0, Culture=neutral, PublicKeyToken=3XXXXXXXXXX' or one of its dependencies. The system cannot find the file specified.

   at CustomActions.CustomActions.UpgradeGroupPolicies(Session session)

Resolution

This scenario is quite rare, and if this is happening, it may be indicative of other server components missing and may be worth reviewing the system joined to the domain in general as these steps are not typically needed. 

Before moving on, see the following article for further guidance to ensure everything else has been installed as needed:

179347 - Installing/Upgrading Symantec Endpoint Encryption Management Server (SEE Management Server)

 

It's also good to make sure you are using the current version of Symantec Encryption Products by reviewing the following article:
156303 - Symantec Encryption Products Current Version Available

 

In order to get past this exception, the group Policy Management features should be installed on the Windows server where SEE Management Server is being installed/upgraded on.

 

Installing the GPMC features from the server manager Add roles and features

To install Group Policy Management Tools (GPMC) on Windows Server 2019 please follow these instructions.

1. Open the Windows Server 2019 Server Manager Dashboard.
If the Server Manager does not start by default press the “Windows + R” keys, Type “servermanager” in the “Open” field and press “Enter” or click the OK button. 

2. In the Server Manager main window, click “Add roles and features”. 

3. In the “Add Roles and Features Wizard” under “Installation Type” check the “Role-based or feature-based installation” radio button and click “Next”. 

4. In the “Add Roles and Features Wizard” under “Server Selection” check the “Select a server from the server pool” radio button, select the server you want to install the Group Policy Management Console Tools (GPMC) on and click “Next”.

5. In the “Add Roles and Features Wizard” under “Server Roles” click “Next”.

6. In the “Add Roles and Features Wizard” under “Features” scroll down and check “Group Policy Management”. Click “Next” If prompted to install any supporting roles accept the defaults and continue.

7. In the “Add Roles and Features Wizard” at the “Confirmation” page click “Install” to begin the installation of the Group Policy Management Tools.

8. The installation of the Group Policy Management Tools will begin, and the progress will be displayed. This installation should not require a restart of the server.