Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Deleted Clients "failed to update"

Updated: 21 May 2010 | 7 comments
JohnDW's picture
0 0 Votes
Login to vote

I just upgraded an MR2 MP2 server to MR3. The 21 clients also updated. I deleted the MR2 and MR2 MP2 install packages from SEPM, but now every time LU runs (for SEPM) it reports that the MR2 and MR2 MP2 clients failed to update, e.g.,

 

SESM AntiVirus Client Win64 [11.0.2000] failed to update

 The MR3 clients are shown (correctly) as up-to-date.

 

So why is SEPM trying to update clients that aren't installed and aren't used? How can I get rid of these errors (that cause empty notification emails, but that's another issue).

 

Thanks.

 


 

Comments

Hawk's picture
30
Oct
2008
0 Votes 0
Login to vote

Yeah, i have got the same trouble after upgrading to SEP 10.0.3001.2224
Is there any solution?

SKlassen's picture
30
Oct
2008
0 Votes 0
Login to vote

I have this as well.  It's caused by eroneous listings in the SEPM database.  I did file a support incident on this and was able to come up with a bit more detail on what exactly is happening, but no solution was found.  It's something the developers will have to correct, as the bad listings for the removed versions are stored in the database as binary data.

 

On the bright side, there is no ill effect from this happening and is only an annoyance.

JohnDW's picture
30
Oct
2008
0 Votes 0
Login to vote

I also contacted Symantec support about it, who had me uninstall and reinstall LU (which caused other issues without solving the problem). Eventually I was told it was a known "cosmetic defect", with the only workaround being to reinstall the deleted client install packages.

 

I did this, which did stop the bogus notifications. At this point the only downside is that the DB is a few hundred MB larger than it needs to be.

 

I do hope this issue is fixed, though, since receiving frequent fake notifications (which say they have "Nothing to report" -- but that's a separate issue) is not a "cosmetic" problem.

Hawk's picture
31
Oct
2008
0 Votes 0
Login to vote


> I do hope this issue is fixed, though, since receiving frequent fake notifications (which say they have "Nothing to
> report" -- but that's a separate issue) is not a "cosmetic" problem.

Agreed.
In addition i use Symantec Security Information Manager, which collects events from SEP manager, and theese fake events i receive on SSIM too :)

I'm angry :)

Perhaps we should wait for SEP MR4 :)

Paul Murgatroyd's picture
31
Oct
2008
0 Votes 0
Login to vote

does anyone have a support call reference for this?

 

I don't see any defect raised internally... if I can link to a customer case I might be able to squeeze this into MR4... but we need to work quickly..

 

 

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint

JohnDW's picture
31
Oct
2008
0 Votes 0
Login to vote

I just PM'ed you my case number.

 

Thanks for taking up this issue!

 

Jack Benson's picture
06
Jan
2009
0 Votes 0
Login to vote

Hi

 

does anyone have a solution to this issue.

 

i have just upgraded to MR4 and i am getting the following error in the event log every hour:

 

Event Type: Error
Event Source: SescLU
Event Category: None
Event ID: 13
Date:  05/01/2009
Time:  19:33:56
User:  N/A
Computer: SERVER
Description: LiveUpdate returned a non-critical error.  Available content updates may have failed to install.

When i go into SEPM.. Admin.. Servers.. highlight "Local Site" and hten press the "Download Liveupdate Content" i get the error message that its trying to update the previous versions of SEP 11.011.0.3001.2224, 11.0.2000, 11.0.2020

All these packages have been deleted to save space on my server.

 

i assume that the error in the Event Log is related to the above issue.

 

any news...

 

thanks

 

jack