Endpoint Protection

Hello

I have a question!

Is it possible to disable Smc.exe on clients computers.

I know the command Smc.exe stop but the next time you start the process back

Why do you want to stop it permanently...?
If you want your Antivirus to work properly you require all its services up and running. 

Hello benzure.
you can stop smc.exe -stop command. But Why you want to close it? couldn't you something?
Thanks

I think smc.exe is only for the client console,
if it's disable, antivirus work properly


The reason :  on clients computers, This process generates a lot of disk access and computers are in high demand

If no solution,can you give me a solution to optimize symantec client computers

Well there will be some cases where they need to disable antivirus services for some time.
I once had a system which had critical operation software, used while operating human bodies.
sometimes AV might show popups like " virus defs out of date" " requesting policies from manager" if that happen then the entire Operation software would crash , you can imagine about the guy who is getting  operated.

you can use the windows SC command to query / start / stop a service on remote machine

 SC is a command line program used for communicating with the
        Service Control Manager and services

For example:
sc \\machine stop "Service name"
sc \\machine start "Service name"

sc \\10.0.0.1 query "Symantec Antivirus"



c:.\>sc query "symantec antivirus"

ICE_NAME: symantec antivirus
    TYPE               : 110  WIN32_OWN_PROCESS (interactive)
    STATE              : 4  RUNNING
                            (STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE    : 0  (0x0)
    SERVICE_EXIT_CODE  : 0  (0x0)
    CHECKPOINT         : 0x0
    WAIT_HINT          : 0x0


to stop ,use this cmd

sc \\10.0.0.1 stop " Symantec Antivirus"



let me know if you have any questions..
 

SMC stands for symantec managment client ( Smc.exe)

suggestion is just to disable this from the SC query

sc stop " Symantec Management Client" is same as running smc -stop from the run.

for remote machines.

sc \\remote machine stop "Symantec Management Client"

wait for 1 min , query again to check if thats stopped

sc \\remote machine query " symantec management client"

status will be stopped ..

was this helpful to you?

Question

If i disable "symantec management client", the client continu to update with the manager?

smc.exe is the process responsible for communication with the manager
smc.exe reads the sylink.xml to initiate the communication, no new updates or policy changes wll be running.

antivirus will run and protect your pc...you can disable it , coz in a day if it connects for 10 mins to get updates / policy its okay and fine, not necessary to run all the time.

 

I think it is better to find firt why it is utilizing that much resources.Following doc can help you in this Symantec Endpoint Protection Client configuration changes for performance optimization http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007102311173048

Agree with aravind, he said it right.

 let us know the version you are running...

check this release notes, let us know you are facing any of these ..if so please run the latest version.

Release notes for Symantec Endpoint Protection 11.0.x and Symantec Network Access Control 11.0.x

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid_p/2007121216360648

 It is better to make SEP icon not visible.
Why?
When onli icon is not visible:
- Communication beetwen SEPs and SEPM is working;
- End-user [not well educated about services ]do not have possibility to stop SEP.

We have not been able to make this work:
   sc stop " Symantec Management Client"

I do not believe it is the same as Start  >  run  >  smc -stop  (enter).

The sc query command works if you change to the correct service name
   sc query SmcService

Obtain the real service name by checking the Properties of the service "Symantec Managent Client (in the Services applet).

Even with the real service name, trying a Stop of the SMC service does not work:
   sc stop SmcService

We are hoping one of the techniquest here will help:
http://www.symantec.com/connect/forums/restart-smcexe-remotely

Thanks

Hi John,

I want to make sure you questions are answered fully so it would be good if you could make a new thread on your issue. This one is very old and will likely be ignored. Also since you replied to a thread in the middle of the post it is even more likely no to be seen. Just wanted to make sure you got your problem solved : )

Grant

Grant,

The other team tells they have resolved what they needed so i will get the solution from them later.

This is about repairing clients after Trojan.Mozipowp damaged them.

Thanks for your post!

John