While trying to open SEP GUI, you can see the below error:
"Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item.
There is no other visible impact to the client functionality. The affect client keeps reporting to the SEPM, updates definition and provides the protection.
SEP 14.3+
No SEP logs observed that would explain the malfunction.
With procmon or properties check, you can find out that the "SymCorpUI" is missing the required permissions.
Edit "SymCorpUI" located at C:\Program Files\Symantec\Symantec Endpoint Protection\<VersionNumber>\Bin64 and ensure that admin and users have the respective permissions.
1. Right click the SymCorpUI and go to properties - security.
2. Ensure that the "Administrators" has all the rights as such:
3. Ensure that the "Users" has the "Read & execute" and "Read" permissions: