Hi,
We have installed Symantec Livestate Recovery Advanced Server 3.0 on Windows 2003 servers. The server can be part of a domain, or standalone.
The product is installed onto G:\LiveState Recovery partition as opposed to C:\Program Files\Symantec\LiveState Recovery\Advanced Server 3.0.
Everything seems to work fine - create backups, restore from backups, until we add in a Software Restriction Policy.
We have implemented Software Restriction Policy with the following:
Default security rule: Disallowed
Enforcement: All software files
Additional rules:
by default, systemroot and program files parameters are read from the registry;
we have added another path rule: G:\LiveState Recovery\Advanced Server 3.0 = Unrestricted;
After applying the policy using gpupdate /force, reboot the server.
After logging on, the VProTray icon disables "Unable to connect to server".
All access to the consoles are unavailable, opening ConsoleMain.exe (from the shortcuts and directly from the folder) gives no response (only the wonderful splashscreen!)
SecurityConfig.exe errors with "Cannot load required security library 'aclui.dll'. Please ensure Microsoft Security Configuration Manager (SCM) is installed. Windows cannot open this program because it is prevented by a software restriction policy. For more information, open Event Viewer or contact your system administrator."
In both cases, the Event Viewer reported no errors...
If we
a) tweaked the restriction policy for Enforcement: All software files except DLLs and libraries
or
b) installed into LSR into C:\Program Files\Symantec\LiveState Recovery,
LSR works without any problem!
Is this some sort of bug?
Jung
