Endpoint Protection

hello !

i have a problem to start a batchfile (alarm.bat) which is located at the specific symantec - folder: ...\Symantec Endpoint Protection Manager\bin

after configuring the notification as described in the manual, the alarmmessage will be shown on the client and the sepm also detects the testvirus (eicar). but no batchfile is started...

i have also configured the services of the sepm as desribed in this article http://www.symantec.com/docs/TECH105287

it is very important for me, because i want to send a message to the admin immediatly, after the detection of the virus ( no email notification ).

thanks a lot for any help !

Do you see any error message like access denied? Is there anything in event viewer?

Symantec Endpoint Protection Manager Notifications do not run batch files.
Fix ID: 1427063
Symptom: Symantec Endpoint Protection Manager Notifications do not run batch files.
Solution: Removed the function that prevented the process of batch or executable files.

http://service1.symantec.com/SUPPORT/ent-security.nsf/ppfdocs/2007121216360648?Open&dtype=corp&src=&seg=&om=1&om_out=prod

The fix is for MR4, so it has been around for something like 2 years now. What's your SEPM version?

Hi !

SEPM version is 11.0.61...

Pawel: no error messages or event logs entries 

any ideas ?

Could you try with any other batch file, for example the one that would just open a window and show any simple text?

hi,

i tried with several batchfiles.

simple batchfiles which shows only echo ... batchfiles which starts exe files etc ...

every batchfile is working after a manual start.

are there a logfile which contains some informations about notification ?

Ok, but are you sure the notification is triggered? Go to notifications and see if there is any.

Hi.

Are you sure that the batch files & EXE are not launched with different credentials and you would thus not see them on your desktop? Have you looked in Task Manager to see if the process is running? For your batchfiles, instead of ECHOing to screen, redirect to a text file with

 batchfile.bat >>c:\textfile.txt  

and then see if the text file has been created.