Endpoint Protection

Hello,

In my experience, the SEP 12.1 client stopped working after about 10 minutes of testing. I then tried to re-push from the SEP manager to correct the installation. The client deployment wizard seems to consider deployment successfull when the setup.exe is executed on the client PC. I would like to see some checking involved to see the client actually installs correctly. In my case the MSI installer locked up and the client never launched.

Thank you for the great product!

Casey

For that you can check the SEP_Inst.log.

The file would be in %temp%
It would give you all the information of the install, if it failed or not.

Hi Casey,

When you say "it stopped working after about 10 minutes" what exactly do you mean?  In what way did it "stop working" ?

The client deployment wizard does indeed push the client then execute setup, but from that point onwards, the setup itself should start to report back status - do you see anything in the reports, deployment report?

thanks

p.

Hi Paul, 

It was really strange. I did a push install from the SEPm, overwriting my 11.0.6 client(win7 64-bit). I then rebooted, and everything looked okay. From there I went to www.#$@spyware2011.net and tried to download the application. It was blocked by SEP as its marked as a known malware file. After this alert went off, the network threat protection, and proactive threat protection were showing status disabled. I clicked fix all, nothing changed. I then rebooted thinking it was just temorary client problem, but after reboot the "Symantec Endpoint Protection" service would not start anymore and the client was just broken. I am now trying to find a method of reverting back to 11.06.

Thanks agian.

Casey

The Spyware 2011 that was a malware, could have made changes to Symantec and disabled some of its services. If you still havbe the executable, I recommend sending it to Symantec.

You may have to reinstall the broken packages. In the Control Panel > Add/Remove Programs

Symantec > Modify. Click on PTP and NTP to uninstall. Then do it again, to install.

thanks Casey, thats really weird... I'm guessing the link you used is obfuscated there - could you please PM me the full link and we can test in house?

As we blocked the files I'm very interested to see why we then appeared to break ourself.

thanks