Video Screencast Help

Can virus remediation necessitate a reboot?

Created: 22 Jul 2013 • Updated: 23 Jul 2013 | 9 comments
This issue has been solved. See solution.

We have some workstations on which uptime is critical.  Is there potential for Symantec Endpoint Protection (currently 11, with plans to upgrade soon) to request a restart to complete virus removal?  And if so, is there a way to supress that notification from the client machine?

Operating Systems:

Comments 9 CommentsJump to latest comment

Rafeeq's picture

It will say in that it needs a reboot to remidiate but it will not reboot it automatically.

check the remediation option

http://www.symantec.com/business/support/index?page=content&id=TECH104430

rebootrequired.png

SOLUTION
Brɨan's picture

SEP will not reboot the client automatically for remediation (nor can it be configured). It will only tell you a reboot is needed but you need to manually initiate the reboot.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

SOLUTION
Mithun Sanghavi's picture

Hello,

Reboot of the machine will be required always when upgrading from SEP 11 to 12.1 - this is normal and expected due to differnced in the architecture of both versions.

However, you can check the article below to create packages in SEPM 12.1 for SEP clients.

Where to (How to) configure the client Restart Settings in SEP 12.1 - options available

http://www.symantec.com/docs/TECH177107

Create the SEP Package with the same settings of NO RESTART.

no restart.JPG

Check this Article for the same:

Creating custom client installation packages in the Symantec Endpoint Protection Manager console version 12.1

http://www.symantec.com/docs/TECH165801

If you are planning to upgrade or migrate to Symantec Endpoint Protection 12.1.3, please take a look at the latest how-to article created by our very own SEP content council team.

Best practices for upgrading to Symantec Endpoint Protection 12.1.x

http://www.symantec.com/business/support/index?page=content&id=TECH163700

Hope that helps!!

Mithun Sanghavi
Associate Security Architect

MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

indianaHusker's picture

In reference to Brian81, I just want to  make sure I'm interpreting correctly that there is no configuration available to keep Symantec from requesting a restart to complete remediation.  Even though the restart would not be automatic, our management has specifically asked that users not see the prompt requesting a restart.

Thanks for your quick responses!  I'll definitely use each of the posts in either explaining our options to management, or for planning our v12 upgrade.

Brɨan's picture

As Rafeeq's screenshot shows, there is the possibility to show users the option that a reboot is needed.

I took your post to mean that you don't want machines to reboot unexpectedly to complete remediation (affecting users and possibly losing work).

It won't happen automatically but you can set a configuration to show users that a reboot is needed (See Rafeeq's screenshot and KBA article he linked for configuring it).

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

indianaHusker's picture

Thanks Brian81.  In the following screenshot, do these settings apply to the restart notifications we've been discussing?

indianaHusker's picture

Sorry, the copy and paste didn't take.  The screenshot should be attached to this comment.

SEP Notifaction Settings.PNG
Rafeeq's picture

These are applicable when you right click on the group select run a command on group and select restart.

They do not apply to installation or virus remediation

http://www.symantec.com/business/support/index?page=content&id=TECH177107