Enforce install fails when starting services

Products

• Data Loss Prevention

Issue/Introduction

Enforce installation fails when attempting to start services. Cancelling will roll back the installation.

In the SymantecDLPNotifier.log, the following entries are seen:

FATAL  | wrapper  | 2023/02/13 17:32:05 | Unable to execute Java command.  Access is denied. (0x5)
FATAL  | wrapper  | 2023/02/13 17:32:05 |     "D:\Program Files\AdoptOpenJRE\jdk8u322-b06-jre\bin\java"

...

ADVICE | wrapper  | 2023/02/13 17:32:05 | --------------------------------------------------------------------
ADVICE | wrapper  | 2023/02/13 17:32:05 | Advice:
ADVICE | wrapper  | 2023/02/13 17:32:05 | Access denied errors when attempting to launch the Java process are
ADVICE | wrapper  | 2023/02/13 17:32:05 | usually caused by strict access permissions assigned to the
ADVICE | wrapper  | 2023/02/13 17:32:05 | directory in which Java is installed.
ADVICE | wrapper  | 2023/02/13 17:32:05 | Unless you have configured the Wrapper to run as a different user
ADVICE | wrapper  | 2023/02/13 17:32:05 | with wrapper.ntservice.account property, the Wrapper and its JVM
ADVICE | wrapper  | 2023/02/13 17:32:05 | will be as the SYSTEM user by default when run as a service.
ADVICE | wrapper  | 2023/02/13 17:32:05 | --------------------------------------------------------------------

 

Cause

DLP Service user needs to have access to the JRE Directory.

Resolution

Grant Read and Execute permissions to the JRE directory for the DLP Service User.

The User also needs to have Full Control on the DLP Installation and Data Directories.