Endpoint Protection

I'm running Endpoint Protection v12.1 on Windows 2008 Enterprise Edition SP1.  The followign two fodlers are identical and 4GB each:

C:\Users\All Users\Symantec\Symantec Endpoint Protection

C:\ProgramData\Symantec\Symantec Endpoint Protection

Why would the app require bioth of these folders.  All the virus definitions are duplicated too:

C:\Users\All Users\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Definitions

C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Definitions

Is there something I can do to eliminate one of these copies?  The install was run on a Symantec Anti-Virus v10 install which upgraded it to v12 of Endpoint.

Thanks,

Matt

Hello there,

It sounds like since you had SAV previously installed, you should use a tool like NoNav or manually uninstall SAV before attempting to install SEP. Another way if possible is just to reimage the machine using a base image that does not have any AV/SEP installed and install a fresh SEP.

If you need help with doing this, please call into tech support for further assistance.

http://www.symantec.com/business/support/contact_techsupp_static.jsp

i guess thats okay, by default SEP 12.1 keeps one version of definition. do you see many versions in both the folders?

Hello,

No, It is not receommended to delete the Folders.

In your case, try the steps provided in the Article below:

How to clear out definitions for a Symantec Endpoint Protection 12.1 client manually

http://www.symantec.com/docs/HOWTO59193

I think perhaps I'll go for an uninstall and running NoNav then start from scratch with the anti-virus.  Unfortunately this machine is a domain controller that we would take quite some to configure if restored.

Thanks for the advice.

Getting rid of the old SAV bits will also allow for SEP to run more stable so that is a good way to go. If possible, try taking a snapshot or image of the DC before doing the NoNav just to be on the safe side. Then at least you have something to revert back to.

Hello,

Since you are carrying, SEP 12.1, I would recommend you "CleanWipe Utility v.12.1".

NoNav is a Utility which is used to Uninstalling Norton Products and Symantec Antivirus v.10 products.

Incase, you need the CleanWipe Utility v.12.1, I would suggest open a web case (Faster and Easier Option)

You can log a case on web portal to receive tool.

QuickStart Guide - Create and Manage Support Cases in SymWISE

http://www.symantec.com/docs/HOWTO31132

How to update a support case and upload diagnostic files with MySupport

http://www.symantec.com/docs/TECH71023

Hope that helps!!

Hi Mithun, this was on a machine that had SAV so NoNav would actually apply here as well as CleanWipe.

Hello,

I appreciate your Concern. I am not denying about the fact.

However, I haven't written anywhere that NoNav is not the right Utility.

Infact, I have written, " Since you are carrying, SEP 12.1, I would recommend you "CleanWipe Utility v.12.1".

NoNav is a Utility which is used to Uninstalling Norton Products and Symantec Antivirus v.10 products. "

Hope that clears...