Endpoint Encryption

Hello ! I encountered a problem while registering a user in the SEE v11.3.0 client.

I am 100% sure that the administrator login and password are correct.

This is not due to BitLocker, as he is disconnected. On the command line using "manage-bde -status" shows "Encrypted (percent): 0.0%"

This problem does not allow me to use your product. I tried many solutions from the forum such as TECH235632, TECH231177. It did not help.

maybe there is a decision about which I do not know yet? 

Hi Dima,

Have you tried the recommendations below?

https://www.symantec.com/connect/forums/cannot-decrypt-laptop-admin-credentials

https://support.symantec.com/us/en/article.tech149263.html

Have you also tried to reset the account's password you're using for this? Or does it work elsewhere?

Is your version of Windows 10 supported by your version of SEE?

Thanks!

This laptop (there are many) will not connect to the server, as will be located far beyond the office. Used OS Win 10 Pro, version 1909 build 18363.535.

I tried your recommendations and they did not help. Any command line action results in "Invalid client administrator credentials: error code -11500". And "PGPWDE" is missing on the device.

OK, then it must be a stand-alone version. But have you made sure that Windows 10 v. 1909 is supported by your version of SEE?

Yes. 

The 11500 error relates to an incorrect passphrase.  Have you tried putting quote signs around the password, and have you tried using the Client Admin Client Console?  Are you able to register the same user via the GUI?

The error code itself relates specifically to your attempt to administratively register the user too, but doesn't cover the automatic registration that should occur when any Windows user logs into a SEE client machine (assuming you're using mainly default settings in the client export).  Therefore, I'd also recommend looking for further errors in the techlogs (typically found in "%ProgramFiles%\Symantec\Endpoint Encryption Clients\Management Agent\TechLogs").

I tried with quotes and without them.

I reinstalled the client and this is what I found in the file "SeemaAdminUIApp00":

[01/09/20 10:48:22][WARNING][2152][0xE94][SEDE][User][(DEAL::CMachineResourceGroupImpl::PopulateDiskGroup) : Default Disk is not encrypted
][CMachineResourceGroupImpl.cpp:2485]
[01/09/20 10:48:22][ERROR][2152][0xE94][SEDE][User][(DEBll::WindowsAdminAuthToken::IsCurrentUserMemberOfADGroup) : User is not the member of given AD Group][DEAuthToken.cpp:864]
[01/09/20 10:48:37][ERROR][2152][0xE94][SEDE][User][(DEAL::CDiskGroupImpl::CreateDiskGroup) : Failed to get the disk group of disk 0. Error=-12293][CDiskGroup.cpp:509]
[01/09/20 10:48:37][ERROR][2152][0xE94][SEDE][User][(DEAL::CDEALImpl::GetDiskGroup) : Failed to get disk group. Error=-12293][CDEALImpl.cpp:302]
[01/09/20 10:48:37][ERROR][2152][0xE94][SEDE][User][(CDriveEncryptionImpl::CreateDiskGroupOpsInstance) : Failed to get disk group instance. Error=-12293][DEBLL.cpp:675]

I see no log entries relating to your user registration attempts.  What does the eedservice00.log say?