I am having a problem with group policy deployment of Symantec Antivirus 10.1. I am working with a computer-based policy to install Symantec from a network install point. I am able to install it from the run command line using the paths copied and pasted from the group policy settings:

msiexec /i "\\<path in policy>\Symantec AntiVirus.msi" TRANSFORMS="\\<path in policy>\sav.mst"

But when I reboot, group policy says "Installing managed software Symantec Antivirus", but it only uninstalls what I manually installed. At first I thought this was a problem with folder permissions, and it seemed like I was right because it is a computer policy and "Domain Computers" did not have permissions to the folder. But after fixing that, it still didn't work. The folder also has "Everyone" permissions.

I double-checked that the computer is in the correct OU and that the policy is applied to "Domain Computers" and linked to that OU. "Uninstall when it falls out of scope" is disabled. Deployment count is 0. GPresult on the client shows the policy as "applied".

Interestingly, the policy seems to have no effect on computers that have been deployed for a while. I'm guessing that's because the admin changed something at some point, but I have no idea what it is. This has been going on for several months and I have been deploying new machines with no anti-virus software for several months, so it is not good.

Any help would be appreciated.

Thanks!