Issue : Symantec Data Center Security 6.0 client not getting IP via DHCP even with Windows core policy
Cause : Known issue with SDCSS 6.0 - Windows default core policy is not allowing svchost.exe to access DHCPCSVC.DLL
Environment : Symantec Data Center Security 6.0
Solution :
Edit the SDCSS prevention policy
Navigate to
Sandboxes
- Core OS Service Options
- Default Windows Services [def_winsvcs_ps,netsvcs_ps]
- Registry Rules
- Writeable resource List
- Allow but log modifications to these Registry keys
Resource Path:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services
Program Path: %systemroot%\system32\svchost.exe
Also add DHCPCSVC.DLL to writable resource list.
Resource Path:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services
Program Path: %systemroot%\system32\DHCPCSVC.DLL