Screencasts - Hilfsvideos

SEP 12.1.2: Services are always stopped

Created: 21 Juli 2013 | 21 Kommentare
das Bild der D@ry1s

Hey guys,

We noticed that there are endpoints with sep services always stopped. Even if it they areon automatic.

Anyone here know why?

Thanks,

Operating Systems:

Kommentare KommentareZum neuesten Kommentar

das Bild der pete_4u2002s

does restarting the services manually keep the services on?

what is the error when you try to start the services?

does repair help to resolve the issue?

das Bild der D@ry1s

Yes when we restart the service it comes on but after restarting the machine it comes back off.

das Bild der D@ry1s

Yes when we restart the service it comes on but after restarting the machine it comes back off.

das Bild der Sumit Gs

This issue is only on winxp systems?

Try to start the service after uncheck the “Allow service to interact with desktop” under the service

Then restart the system and check service will again stop or not.

Regards

Sumit G.

das Bild der Rafeeqs

Is it happening on windows7 or on Server OS?

is the WMI service started or stopped?

das Bild der D@ry1s

As of this time all of it are windows xp.. anything?

Thanks,

das Bild der Rafeeqs

can you try to run proces explorer on one of the affected pcs to see why teh automatic startup services are failing?

das Bild der D@ry1s

How can I run the process explorer?

das Bild der Rafeeqs

simillar to this, 

http://blogs.technet.com/b/markrussinovich/archive/2010/01/13/3305263.aspx

I would also like to know the state of the service after reboot. Does the state is automatic delayed or automatic or manual or disabled?

Do you have any group policy to disable the services?

das Bild der Brɨans

Have you tried running a repair on the client via add/remove programs?

Does running the SymHelp tool show any errors?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

das Bild der D@ry1s

What errors should I check to be exact?

das Bild der Brɨans

Did the SymHelp tool reveal any? It would show if it did.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

das Bild der D@ry1s

That's the weird part, it didnt show any error at all, just a warning that 12.1.3 is already up and that I can upgrade anytime I want.

das Bild der D@ry1s

Yes we already have done that, and no Symhelp log errors was found.

Thanks,

das Bild der Mithun Sanghavis

Hello,

Is this issue occurying on all Windows XP clients?

Could you please let me know if "Symantec Endpoint Protection" and "Symantec Management Client" services are both stopped?

Do you have a Local System Account?

Mithun Sanghavi
Associate Security Architect

MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

das Bild der D@ry1s

Yes, only on XP machines so far, and yes "Symantec Endpoint Protection" and "Symantec Management Client" services are both stopped.

We have local account, admin account to be exact, but what users normally use is their domain account you know, for email and other things.

das Bild der Mithun Sanghavis

Hello,

Your issue would require a root cause analysis.

I would suggest you to please Create a case with Symantec Technical Support Team and PM me your case #.

How to create a new case in MySupport

http://www.symantec.com/docs/TECH58873

Phone numbers to contact Tech Support:-

Regional Support Telephone Numbers:

  • United States: 800-342-0652 (407-357-7600 from outside the United States)
  • Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
  • United Kingdom: +44 (0) 870 606 6000

Additional contact numbers: http://www.symantec.com/business/support/contact_techsupp_static.jsp

Hope that helps!!

Mithun Sanghavi
Associate Security Architect

MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

das Bild der Chetan Savades

Hi,

Thank you for posting in Symantec community.

There is nothing specific to mentioned issue in SEP 12.RU2 later fix notes.

Total how many XP computers are affected?

Have you tried with SEP client repair?

Do you see any error in eventviewer. Try to run Symhelp to find out possible root cause.

http://www.symantec.com/docs/TECH170752

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

das Bild der D@ry1s

Yes we already tried to repair it and it didint work, we already use the symhelp too, as I replied above.

Do we have any tool to detect viruses that are undetected on SEP? we scan tha machine after manually start the SEP services and it didnt found anything, after restarting its off again.

das Bild der Brɨans

You can try Symantec Power Eraser

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

das Bild der D@ry1s

I'll reply a feedback later.

Thanks,