SEPM with Default SQL Express Server database The following table summarizes Endpoint Protection Manager's security policy requirements for Windows Server 2008 / Windows 7 or later: SEPM Configuration The Endpoint Protection Manager installer cannot assign user rights to domain security policies. The alert during installation indicates that domain policies are enforcing the privileges from the domain controller and do not contain the required user rights for Endpoint Protection Manager. See Related Articles for more information on group policy precedence. However, if the computer that hosts Endpoint Protection Manager is a part of a domain, then domain policies override local policies. The Endpoint Protection Manager installer automatically adds the required rights to local security policies. (The highlighted text appears only during a new installation.)Įxample of message seen after configuration (click to enlarge):Įxample of message seen after upgrade (click to enlarge): You have options to continue or cancel the installation.Įxample of message seen during installation (click to enlarge): You have options to correct policies and try again, cancel the installation, or continue with the warnings present.įor new installations, another message appears advising you that based on the type of database you subsequently choose additional user rights may be required. This message either contains the user rights that the required services do not have, and the policies that do not have the rights, or you can click Show Details for this information. The management console cannot run if user rights are not assigned to Symantec Endpoint Protection Manager services. Symantec Endpoint Protection Manager cannot read the user rights that are specified in the Windows Security Policies on this computer. The management console cannot run until you assign user rights to the services in the specified policies: Symantec Endpoint Protection Manager services require user rights in Windows security policies. Note: While the services for Endpoint Protection Manager might run at startup, it is only a temporary state until the domain policies are enforced. You see one of the following warning messages:

During the installation or configuration of Symantec Endpoint Protection Manager (SEPM ), you see a warning that indicates that the appropriate user rights are not assigned to Endpoint Protection Manager services.

Symantec endpoint protection 14 15 user