Hello!
For the past few months we have been attempting to troubleshoot an issue here, and I believe I may have found out today that Symantec is the root of the problem.
The problem: We use a patch deployment application (Shavlik) to distribute Windows Updates to various computers. For the past few months (very intermittent), we have been having issues where a few patches will become installed and then the rest will completely fail, and Windows will attempt to roll back all of the patches that had failed. As Shavlik merely copies the patches and creates a batch file to install them, we became pretty confident that this wasn't a Shavlik issue. We have been attempting numerous fixes, but today was the first time I tried to do something different with Symantec.
The Windows Error Code: 0x80070020 (too generic to really get a handle on).
We have a server that this is currently an issue on, and I decided to setup a Win7 test box (since the OS version didn't seem to matter). I installed Symantec Endpoint Protection 12.1.6168.6000 (same as the server version), and of course when attempting to deploy ~150 Windows Updates, they failed in epic fashion. I then decided to install SEP 12.1.6867.6400, re-ran the patches, and everything seemed to install pretty smoothly. I've been parsing over the SEP and SEPM logs and haven't found anything indicative of Symantec blocking it, but that is the only thing that changed (that, and the group that the machine sat in on SEPM).
Has this been a known issue? Are there any specific logs I should be looking in to see if this was blocked for any reason? I already checked Tamper Protection and came up empty.
Thanks!