AntiVirus clients do not communicate with parent server after converting to a managed client
|Article:TECH100434|||||Created: 2003-01-22|||||Updated: 2010-09-03|||||Article URL http://www.symantec.com/docs/TECH100434|
You converted a Norton AntiVirus Corporate Edition 7.x or Symantec AntiVirus 8.x unmanaged client to a managed client by copying the Grc.dat and restarting the computer or recycling the service immediate. The client does not communicate with parent server until the client computer restarts a second time, or until the client service is recycled again.
When converting an unmanaged client to a managed client by coping the Grc.dat from the parent server, it is necessary to allow the Grc.dat to process into the registry before restarting the computer or recycling the service.
Once the client knows that it will be communicating with a parent server, the client computer can then be restarted or the service recycled. After the computer restart or recycled service, when the client comes back up:
Rtvscan calls Transman > Transman calls Winsock, which then opens UDP port 2967 for Rtvscan to communicate with the parent server.
Thus, you must allow the Grc.dat the necessary time to finish being processed before restarting the computer or recycling the service. Depending on several factors such as CPU load or level of network activity, this process can take from 5 to 20 minutes to complete.
If you want to accelerate the processing of the Grc.dat after copying the file, you can change the ProcessGRCNow value in the registry from 0 to 1.
WARNING: Symantec strongly recommends that you back up the registry before you make any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify only the keys that are specified. Read the document How to back up the Windows registry for instructions.
To configure your client to process a Grc.dat file immediately
- Click Start > Run.
- In the run dialog box type regedit, and click OK.
- In the left pane, browse to HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\ProductControl.
- Right-click the ProductControl key, and click New > DWORD Value.
- Name the DWORD value ProcessGRCNow.
- Double-click the ProcessGRCNow value and change the Value data to 1
- Click OK.
- Close the registry editor.
The client can then be restarted, or the client service can be recycled. From a command prompt (Start > Run > cmd) run netstat -a and you should see UDP port 2967, at this point the client will be communicating with its parent server.
Article URL http://www.symantec.com/docs/TECH100434