Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

disable Smc.exe

Updated: 03 Nov 2010 | 14 comments
benzure's picture
0 0 Votes
Login to vote

Hello

I have a question!

Is it possible to disable Smc.exe on clients computers.

I know the command Smc.exe stop but the next time you start the process back

discussion Filed Under:

Comments

shp's picture
15
Sep
2009
0 Votes 0
Login to vote

Why do you want to stop it

Why do you want to stop it permanently...?
If you want your Antivirus to work properly you require all its services up and running. 

Regards,
Srinivas H.P.
HCL Infosystems Ltd

Fatih Teke's picture
15
Sep
2009
0 Votes 0
Login to vote

you rigth

Hello benzure.
you can stop smc.exe -stop command. But Why you want to close it? couldn't you something?
Thanks

 Everything works better when everything works together.

benzure's picture
15
Sep
2009
0 Votes 0
Login to vote

I think smc.exe is only for

I think smc.exe is only for the client console,
if it's disable, antivirus work properly

The reason :  on clients computers, This process generates a lot of disk access and computers are in high demand

If no solution,can you give me a solution to optimize symantec client computers

Rafeeq's picture
16
Sep
2009
0 Votes 0
Login to vote

HI

Well there will be some cases where they need to disable antivirus services for some time.
I once had a system which had critical operation software, used while operating human bodies.
sometimes AV might show popups like " virus defs out of date" " requesting policies from manager" if that happen then the entire Operation software would crash , you can imagine about the guy who is getting  operated.

you can use the windows SC command to query / start / stop a service on remote machine

 SC is a command line program used for communicating with the
        Service Control Manager and services

For example:
sc \\machine stop "Service name"
sc \\machine start "Service name"

sc \\10.0.0.1 query "Symantec Antivirus"

c:.\>sc query "symantec antivirus"

ICE_NAME: symantec antivirus
    TYPE               : 110  WIN32_OWN_PROCESS (interactive)
    STATE              : 4  RUNNING
                            (STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE    : 0  (0x0)
    SERVICE_EXIT_CODE  : 0  (0x0)
    CHECKPOINT         : 0x0
    WAIT_HINT          : 0x0

to stop ,use this cmd

sc \\10.0.0.1 stop " Symantec Antivirus"

let me know if you have any questions..
 

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

benzure's picture
16
Sep
2009
0 Votes 0
Login to vote

your suggestion in the case

your suggestion in the case of a complete disabling of SEP ??

Is it possible to disable only Smc.exe but have antivirus operational

 

Rafeeq's picture
16
Sep
2009
0 Votes 0
Login to vote

Hi

SMC stands for symantec managment client ( Smc.exe)

suggestion is just to disable this from the SC query

sc stop " Symantec Management Client" is same as running smc -stop from the run.

for remote machines.

sc \\remote machine stop "Symantec Management Client"

wait for 1 min , query again to check if thats stopped

sc \\remote machine query " symantec management client"

status will be stopped ..

was this helpful to you?

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

John Cooperfield's picture
30
Apr
2010
0 Votes 0
Login to vote

sc commands do not stop the SMC service

We have not been able to make this work:
   sc stop " Symantec Management Client"

I do not believe it is the same as Start  >  run  >  smc -stop  (enter).

The sc query command works if you change to the correct service name
   sc query SmcService

Obtain the real service name by checking the Properties of the service "Symantec Managent Client (in the Services applet).

Even with the real service name, trying a Stop of the SMC service does not work:
   sc stop SmcService

We are hoping one of the techniquest here will help:
http://www.symantec.com/connect/forums/restart-smcexe-remotely

Thanks

Grant_Hall's picture
02
May
2010
0 Votes 0
Login to vote

Hi John, I want to make sure

Hi John,

I want to make sure you questions are answered fully so it would be good if you could make a new thread on your issue. This one is very old and will likely be ignored. Also since you replied to a thread in the middle of the post it is even more likely no to be seen. Just wanted to make sure you got your problem solved : )

Grant

Please don't forget to mark your thread solved with whatever answer helped you : )

John Cooperfield's picture
03
May
2010
0 Votes 0
Login to vote

Grant, The other team tells

Grant,

The other team tells they have resolved what they needed so i will get the solution from them later.

This is about repairing clients after Trojan.Mozipowp damaged them.

Thanks for your post!

John

benzure's picture
16
Sep
2009
0 Votes 0
Login to vote

Question If i disable

Question

If i disable "symantec management client", the client continu to update with the manager?

Rafeeq's picture
16
Sep
2009
0 Votes 0
Login to vote

Nope

smc.exe is the process responsible for communication with the manager
smc.exe reads the sylink.xml to initiate the communication, no new updates or policy changes wll be running.

antivirus will run and protect your pc...you can disable it , coz in a day if it connects for 10 mins to get updates / policy its okay and fine, not necessary to run all the time.

 

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

AravindKM's picture
16
Sep
2009
2 Votes +2
Login to vote

I think it is better to find

I think it is better to find firt why it is utilizing that much resources.Following doc can help you in this
Symantec Endpoint Protection Client configuration changes for performance optimization
http://service1.symantec.com/SUPPORT/ent-security....

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

Rafeeq's picture
16
Sep
2009
0 Votes 0
Login to vote

Hi

Agree with aravind, he said it right.

 let us know the version you are running...

check this release notes, let us know you are facing any of these ..if so please run the latest version.

Release notes for Symantec Endpoint Protection 11.0.x and Symantec Network Access Control 11.0.x

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid_p/2007121216360648

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

sezam's picture
16
Sep
2009
0 Votes 0
Login to vote

 It is better to make

 It is better to make SEP icon not visible.
Why?
When onli icon is not visible:
- Communication beetwen SEPs and SEPM is working;
- End-user [not well educated about services ]do not have possibility to stop SEP.