Endpoint Protection

 View Only
  • 1.  disable/enable SEP client from SEPM

    Posted Nov 11, 2013 12:19 AM

    Can we start or stop the services of a SEP client from SEPM? i.e. like we do it at client end "smc -stop or start", can we do the same from SEPM for a SEP?



  • 2.  RE: disable/enable SEP client from SEPM

    Posted Nov 11, 2013 12:25 AM

    No thats not possible with SEPM you can use sysinternals to do it

    here is the example

    https://www-secure.symantec.com/connect/forums/restart-smcexe-remotely

    Simplest will be to use psexec.

    I use PSEXEC to remotely restart SEP on a client.

    psexec \\%remotecomputer% "C:\Program Files\Symantec\Symantec Endpoint Protection\smc.exe" -stop

    ping -n 15 -w 1 127.0.0.1>nul
    psexec \\%remotecomputer% "C:\Program Files\Symantec\Symantec Endpoint Protection\smc.exe" -start


  • 3.  RE: disable/enable SEP client from SEPM

    Posted Nov 11, 2013 12:37 AM

    Yes it's not possible for SEPM console.You can use Psexec tool for same

    You can check few thread for same

    https://www-secure.symantec.com/connect/forums/how-can-i-remotely-restart-sep-workstation

    https://www-secure.symantec.com/connect/forums/stop-smc-service-remotely



  • 4.  RE: disable/enable SEP client from SEPM

    Posted Nov 11, 2013 10:48 AM

    Hello,

    the SMC controls all the communication between SEPM and it clients. If you stop it, you can't start it again from the SEPM because there's no communication to send any command!!!

    That is, there's no way to stop SMC from the SEPM, this is on purpose to prevent customers shoot on their own feet...

    If you need to act on SMC, you need to do it out of the SEPM, hence you will be forced to think on how to start it again since the SEPM can't do it.