cancel
Showing results for 
Search instead for 
Did you mean: 

LiveState Recovery and software restriction policies

Confucius
Level 2

Hi,

We have installed Symantec Livestate Recovery Advanced Server 3.0 on Windows 2003 servers. The server can be part of a domain, or standalone.

The product is installed onto G:\LiveState Recovery partition as opposed to C:\Program Files\Symantec\LiveState Recovery\Advanced Server 3.0.

Everything seems to work fine - create backups, restore from backups, until we add in a Software Restriction Policy.

We have implemented Software Restriction Policy with the following:

Default security rule: Disallowed

Enforcement: All software files

Additional rules:

by default, systemroot and program files parameters are read from the registry;

we have added another path rule: G:\LiveState Recovery\Advanced Server 3.0 = Unrestricted;

After applying the policy using gpupdate /force, reboot the server.

After logging on, the VProTray icon disables "Unable to connect to server".

All access to the consoles are unavailable, opening ConsoleMain.exe (from the shortcuts and directly from the folder) gives no response (only the wonderful splashscreen!)

SecurityConfig.exe errors with "Cannot load required security library 'aclui.dll'. Please ensure Microsoft Security Configuration Manager (SCM) is installed. Windows cannot open this program because it is prevented by a software restriction policy. For more information, open Event Viewer or contact your system administrator."

In both cases, the Event Viewer reported no errors...

If we

a) tweaked the restriction policy for Enforcement: All software files except DLLs and libraries

or

b) installed into LSR into C:\Program Files\Symantec\LiveState Recovery,

LSR works without any problem!

Is this some sort of bug?

Jung

0 REPLIES 0