Problem

...

Overview:

The Arellia Agent  Agent requests a policy/filter update but is denied by the Server. The issue is caused by policy permissions on the Server.

Detailed:

In the Server Logs (viewed from the Altiris Log Viewer or found in C:\ProgramData\Symantec\SMP\Logs), the logs will have the following error:

...

The error is stated as "The current user does not have required permission 'read' to load..."

Solution

To resolve this issue, do the following steps:

1. First, rightRight-click on a policy that is not being received by the agents and then click "Security."
2. Then change Change the Role role to "Symantec Administrators."
3. Verify that Select the "Read" permission check box is checked , either inherited or non-inherited. If it is checked then the error is in IIS, if it is not check continue with the following steps.
4. Close out of the Security Manager.

If you are unable to set permissions using the Security Manager, then do the following steps:

1. From the console, right-click the policy that is not being updated and click "Export."
2. Edit the .xml policy using Notepad and delete everything between and including <security> tags.
3. Delete the policy from the Console.
4. Right-click and select Import and import the saved .xml policy.
5. Right-click on the newly imported policy and select "Security" and verify that the read permissions have been added.
6. Repeat the above steps for all policies/filters and folders that do not have the read permission.

After doing the above steps, verify that the agent is able to receive the updated policies and filters. The error in the logs should disappear.

Additional information

The issue is caused by policy permissions on the Server.