Unexpected, frequent LiveUpdate sessions launch on Symantec Endpoint Protection for Macintosh client

Article:TECH144410  |  Created: 2010-11-17  |  Updated: 2011-07-26  |  Article URL http://www.symantec.com/docs/TECH144410
Article Type
Technical Solution



On an unmanaged Symantec Endpoint Protection (SEP) for Macintosh client, LiveUpdate runs at unexpected times or on a different schedule than was set by the User.


  • Macintosh 10.4.x-10.6.x
  • SEP 11.0.6000 (Release Update 6) - 11.0.6300 (Release Update 6 Maintenance Patch 3)
  • Unmanaged client


Unmanaged SEP for Macintosh client by default runs daily with visible progress for all users. This schedule is written to the root user's crontab.  It is not visible via the Symantec Scheduler user interface.



Migrate to Symantec Endpoint Protection for Macintosh, Release Update 7 (11.0.7000, RU7) or higher.

If migration is not possible at this time:

  1. Verify this schedule is present by running the following command via Terminal, entering your admin password when prompted:
    sudo symsched -l
    (That's a lowercase L)

    Note: The password will not echo on screen.
  2. If the schedule/s shown there is not desired, delete the current schedule/s:
    sudo symsched -d all
  3. If you wish to add a new schedule for all users, use the following command, substituting the time you want (24-hour time):
    sudo symsched LiveUpdate "Update All Daily" 1 0 -daily 07:17 "All Products" -quiet


Article URL http://www.symantec.com/docs/TECH144410

Terms of use for this information are found in Legal Notices