After installing Symantec Endpoint Protection Manager (SEPM) or newer, you are unable to start the Symantec Endpoint Protection Manager Webserver service when it is running as NT SERVICE\semwebsrv.

When running this service as SYSTEM, this issue does not occur.

Error 1:

Windows could not start the Symantec Endpoint Protection Manager Webserver on Local Computer. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to service-specific error code 1.

Error 2:

The following error is displayed in the Application log in the Event Viewer.

Source: Apache Service

Event ID: 3299

Level: Error

Description: The Apache service named  reported the following error:

>>> (20024)The given path is misformatted or contained invalid characters: AH00532: Invalid config file path E:\\Program Files (x86)\\Symantec\\Symantec Endpoint Protection Manager\\apache\\conf\\httpd.conf     .

This issue can occur when the account NT SERVICE\semwebsrv is unable to read or find the Apache configuration file (httpd.conf) in its default location. (Default location: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\apache\conf\httpd.conf)

Solution 1:

If the SEPM has been installed on Windows 2008 R2 or above, check the permissions on httpd.conf and confirm that NT SERVICE\semwebsrv has Read and Read & execute permissions.  

Solution 2:

If the SEPM has been installed to a drive other than C: on Windows 2008 or below, then one of the following groups must be allowed List folder contents and Read permissions from the root directory of the drive all the way down to, and including, the SEPM's installation directory:

1. Users
2. Authenticated Users
3. Network Service