Endpoint Protection

 View Only
Expand all | Collapse all

Doesn't auto update

Migration User

Migration UserJun 09, 2010 08:03 AM

  • 1.  Doesn't auto update

    Posted Jun 09, 2010 12:41 AM
    Dear All,

    Our company has recently purchased Symantec Endpoint Protection version: 11.0.4000.2295. I have set automatic updates on daily basis. But it didn't auto update and for the sake of updating the latest updates i need to do it manually.

    After searching an article on your web site at http://www.symantec.com/connect/ja/articles/troubleshooting-liveupdate-issues-symantec-endpoint-protection i have found that i need to check the following web site in my browser


    a. Liveupdate.symantecliveupdate.com
    b. Liveupdate.symantec.com
    c. Symantec.com

    When i try to browser a & b urls then the browser redirects me her http://www.symantec.com/norton/index.jsp but i am able to browse symantec.com

    I stopped the my window xp (sp3) firewall but that also doesn't able me to browse a & b urls.

    Could any buddy please tell me how to set automatic updates.

    Best regards,

    Ghaffar


  • 2.  RE: Doesn't auto update

    Posted Jun 09, 2010 12:46 AM
    Do you use proxy server for getting the Internet in this server---check the browser settings and confirm...


  • 3.  RE: Doesn't auto update

    Posted Jun 09, 2010 12:58 AM
    Also if you have any firewall between Internet and SEPM try by bypassing it....


  • 4.  RE: Doesn't auto update

    Posted Jun 09, 2010 01:00 AM
    Correct the DCOM permission and reboot the machine.

    Checking DCOM settings

    The last place to check rights on a computer is in its DCOM settings.

    To verify Distributed COM properties
    1. On the Windows taskbar, click Start > Run.
    2. Type the following, and then click OK:

      dcomcnfg
       
    3. Do one of the following, depending on your operating system:
      • In Windows XP/2003, click Component Services > Computers > My Computer. Then right-click My Computer and click Properties.
      • In all other versions of Windows, go on to the next step.
    4. On the Default Security or Default COM Security tab, under Default Access Permissions, click Edit Default.
    5. Verify that Administrators, Interactive, and System accounts are set to Allow Access, and then click OK.
    6. Under Default Launch Permissions, click Edit Default.
    7. Verify that the Administrators, Interactive, and System accounts are set to Allow Launch, and click OK.
    8. Do one of the following, depending on your operating system:
      • In Windows XP/2003, skip the two following steps.
      • In all other versions of Windows, go on to the next step.
    9. In the Default Configuration Permissions section, click Edit Default.
    10. In the Registry Key Permissions window, verify that the following are set to Full Control, and then click OK:

      CREATOR OWNER
      ...\Administrators
      SYSTEM
       
    11. On the Default Properties tab, verify that Default Impersonation Level is set to Identify.
    12. Click Apply, and then click OK.
    13. Restart the computer for the changes to take effect.


  • 5.  RE: Doesn't auto update

    Posted Jun 09, 2010 03:35 AM
    Dear Sir,

    I use proxy server and i tired with proxy and without proxy i.e. by connecting to internet directly but so for no luck.


  • 6.  RE: Doesn't auto update

    Posted Jun 09, 2010 06:09 AM
    Confiure proxy in your SEPM or SEP

    if SEP then
    Control Panel -Liveupdate 
    there you can configure proxy

    if SEPM
    then SEPM- Admin-Servers -Local Site-<Server Name>-Properties- Proxy Servers




  • 7.  RE: Doesn't auto update

    Posted Jun 09, 2010 07:57 AM
    Dear Vikram,

    Thanks for your reply at this time i am connected to internet directly through my isp therefore i am currently not using web proxy server and still the updates are not downloading and installing automatically.


  • 8.  RE: Doesn't auto update

    Posted Jun 09, 2010 08:03 AM
    Disable windows firewall and try..


  • 9.  RE: Doesn't auto update

    Posted Jun 09, 2010 08:04 AM
    Dear Prachand,

    Thanks for your reply i did what you told me but to step 8. I didnt find Default Configuration Permissions section in step 9. So i were not able to do step 9-12. Could you please tell me where i can find Default Configuration Permissions section in step 9.

    I am using windows xp (sp3) professional version 2002.

    Best regards,
    Ghaffar


  • 10.  RE: Doesn't auto update

    Posted Jun 10, 2010 07:54 AM
    Dear arvind thanks for your reply. That was the first thing, but no luck 


  • 11.  RE: Doesn't auto update



  • 12.  RE: Doesn't auto update

    Posted Jul 02, 2010 02:37 PM
    Hi, just saw the thread.

    If the issue still persists. You may check this :
    1. In Component services, MyComputer Properties
    2. Click Default Permissions
    3. Change the Default Authentication level to Connect. [It should be set to None now].
    4. Click Apply and OK.
    5. Restart the system.
    6. Observe it to confirm if the automatic update works.

    Regards,
    Santosh


  • 13.  RE: Doesn't auto update

    Posted Jul 02, 2010 04:24 PM

    First of all... you will never be able to browse a. and b. (in the original post).  The redirect is exactly what's supposed to happen.

    Are you working with SEPM (the manager) or SEP (the clients)?  Are you talking about a managed client, or being able to receive updates from LiveUpdate?  Does manually launching LiveUpdate work or not?

    It could be that the SYSTEM account (which is what runs automatic LiveUpdate) either has invalid proxy credentials, or is set to work offline.  Try the following.

    Steps to edit the SYSTEM account proxy settings through using a Scheduled Task:

    1. Click Start > Run
    2. Type cmd and click OK
    3. Type in this the following command and press Enter:

    at 12:00 /INTERACTIVE "C:\Program Files\Internet Explorer\iexplore.exe"

    You should receive a confirmation stating "added a new job..."
    4. Navigate to the Control Panel and open Scheduled Tasks
    5. Right-click the new task just created in the previous step (probably named "At1") and click Run.
    This will open an Internet Explorer window that will now be running under the SYSTEM account.
    6. Go to the Tools menu and select Internet Options
    7. Select the Connections tab and click the LAN Settings button.
    8. Uncheck Use a proxy server for your LAN (or verify they are the correct settings).
    9. Click OK twice.  While still in this IE session, under File, verify that "Work offline" is not checked.  You can close IE, and remove the scheduled task.

    If a managed SEP client:

    10. Click Start > Run
    11. Type  SMC -stop and click OK.
    The Symantec Endpoint Protection icon should disappear from the system tray.
    12. Click Start > Run
    13. Type in SMC -start and click OK.

    (The Symantec Endpoint Protection icon should appear in the system tray and should now display a green dot indicating that it is connected to the Symantec Endpoint Protection Manager.)

    sandra
    ps. I would also encourage you to migrate to RU6a (11.0.6005).  The build you are using, 11.0.4000 (MR4), is from November of 2008.