Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Endpoint Preventing profiles from being unloaded on terminal server

Updated: 21 May 2010 | 3 comments
Hayden 2's picture
0 0 Votes
Login to vote

Hi All,

Running Windows 2003 x64 Terminal server. Have the latest (at time of writing) Endpoint Security installed. I am getting this in my eventlog:


Event Type: Information
Event Source: UPHClean
Event Category: None
Event ID: 1401
Date: 4/17/2009
Time: 3:25:33 PM
User: MEDICALERT\Administrator
Computer: TSVR-01
Description:
The following handles in user profile hive MEDICALERT\Administrator (S-1-5-21-1482476501-854245398-725345543-500) have been remapped because they were preventing the profile from unloading successfully:

Rtvscan.exe (2012)
HKCU\Software\Symantec\Symantec Endpoint Protection\AV\Custom Tasks (0x308)
HKCU\Software\Symantec\Symantec Endpoint Protection\AV\Custom Tasks\Temporary Quick Scan Options {63D4262E-25D6-45D7-9F97-871FDBB19E81} (0x8e8)
HKCU\Software\Symantec\Symantec Endpoint Protection\AV\Custom Tasks\420843B0-10FA-47E4-B970-CA677A6C0ADD (0x964)
HKCU\Software\Symantec\Symantec Endpoint Protection\AV\Custom Tasks\420843B0-10FA-47E4-B970-CA677A6C0ADD (0xa28)

Now. I am using the Beta of uphclean for 64bit. Anyway, whatever user, rtvscan seems to be locking the file. Any ideas?

Comments

SAM_SHAIKH's picture
16
Apr
2009
0 Votes 0
Login to vote

Hi, Try to disable NTP on

Hi,

Try to disable NTP on this machine and check the status.

I hope you are using SEP MR4MP1a as this is the latest  build.

Such issues are been resolved in this build. Check your full version please.

Rgrds,
SAM

Symantec World's picture
16
Apr
2009
0 Votes 0
Login to vote
Hayden 2's picture
16
Apr
2009
0 Votes 0
Login to vote

I am using the beta build of

I am using the beta build of 2.0. The readme does not help.