Endpoint Protection

 View Only
  • 1.  help

    Posted Jul 23, 2009 03:49 PM
    Can anyone here help me with liveupdate running in silent mode. For a standard user, how do you get liveupdate to run in silent mode? I am using symantec antivirus corporate edtion. version 10.1, do you set liveupdate to run in silent mode, so that liveupdate can get connect to internet to get virus definitions. Is this the solution to a non admin account not being able to connect to symantec?
    thanks for any reply,
    slakk


  • 2.  RE: help

    Posted Aug 04, 2009 03:21 PM
    If the client is taking the updates from the SSC, then by default it is using liveupdate in Silent Mode.

    If you have an individual installation of SAV client, than you can schedule the liveupdate and it will run in silent mode in the background.

    Cheers,
    Aniket


  • 3.  RE: help

    Posted Aug 04, 2009 05:06 PM
    hi Aniket,
     
    I have installed an individual installation of SAV client on a couple of computers, they are running windows xp sp2, I am using SAV corp. edition 10.1. But when I log into a standard user account and run liveupdate I can't connect to symantec's website to get the updates. So I have users who always get a pop window saying that there virus definitions are out of date.  I have liveupdate scheduled to run at a certian time, but doesn't work because liveupdate is running as the account that is currently logged in. If I log into the admin account and run LUALLE.exe /S  will this command run liveupdate in silent mode for the restricted user account?
    thanks
    slakk


  • 4.  RE: help

    Posted Aug 04, 2009 07:47 PM
    Hi,

    This could be related to DCOM permissions:

    Checking DCOM settings

    The last place to check rights on a computer is in its DCOM settings.

    To verify Distributed COM properties

    1. On the Windows taskbar, click Start > Run.
    2. Type the following, and then click OK:

    dcomcnfg

    3. Do one of the following, depending on your operating system:
    * In Windows XP/2003, click Component Services > Computers > My Computer. Then right-click My Computer and click Properties.
    * In all other versions of Windows, go on to the next step.
    4. On the Default Security or Default COM Security tab, under Default Access Permissions, click Edit Default.
    5. Verify that Administrators, Interactive, and System accounts are set to Allow Access, and then click OK.
    6. Under Default Launch Permissions, click Edit Default.
    7. Verify that the Administrators, Interactive, and System accounts are set to Allow Launch, and click OK.
    8. Do one of the following, depending on your operating system:
    * In Windows XP/2003, skip the two following steps.
    * In all other versions of Windows, go on to the next step.
    9. In the Default Configuration Permissions section, click Edit Default.
    10. In the Registry Key Permissions window, verify that the following are set to Full Control, and then click OK:

    CREATOR OWNER
    ...\Administrators
    SYSTEM

    11. On the Default Properties tab, verify that Default Impersonation Level is set to Identify.
    12. Click Apply, and then click OK.
    13. Restart the computer for the changes to take effect.


    Troubleshooting Symantec AntiVirus Corporate Edition installations: Checking rights and permissions

    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/3f862957b21b671588256c620077a200?OpenDocument

    Is DCOM enabled?

    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/8068682cee4e7f7088257536006ac6fe?OpenDocument