Windows will not boot after installing SEP with Smart App Control enabled
search cancel

Windows will not boot after installing SEP with Smart App Control enabled

book

Article ID: 274093

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

In a Windows 11 22H2 environment, if SEP is installed with Smart App Control(SAC) enabled and the OS is restarted, then OS will not boot.

If Smart App Control is enabled after SEP is installed, the OS will boot.

Environment

Release :

Resolution

Workaround:

  • Do not enable Windows 11 Smart App Control prior to installing Symantec Endpoint Protection. Smart App Control can be enabled post-installation. 

Mitigation: 

  • If Smart App Control was enabled prior to installation of Symantec Endpoint Protection, the system can be recovered via Windows Safe Mode.
    • Restart Windows into Safe Mode
    • Disable Sysplant.sys via the registry: 
      • Navigate to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sysplant
      • Set the "Start" DWOD value to "4"
    • Restart Windows