Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

How to update a managed client

Created: 01 Apr 2013 | 25 comments

What is the command to run live update on managed clients that LiveUpdate is disabled?

I found in older article to run luall.exe but not working for new clients

I am running Symantec Endpoint Protection ver. 12.1.2015.2015

Operating Systems:

Comments 25 CommentsJump to latest comment

.Brian's picture

What do you mean LiveUpdate is disabled? Via policy or it is has been removed from the system?

running luall.exe is the command that should work. Are you getting an error?

https://www-secure.symantec.com/connect/forums/lua...

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Linas's picture

What is the command to run LiveUpdate?

I manage 250 clients and LiveUpdate is disabled all clients get virus defs from server

I want to know the command to run manually on a particular client

I am deploying 50 clients and one won’t update virus defs so I want to run manually

.Brian's picture

luall.exe is gone in 12.1

Been replaced per this thread:

https://www-secure.symantec.com/connect/forums/sep...

The command line to run is SepLiveUpdate.exe from here: C:\Program Files\Symantec\Symantec Endpoint Protection

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Rafeeq's picture

you can run SepLiveUpdate.exe however running this will have them to get the updates from Internet and not from your management server

Chetan Savade's picture

Hi,

Liveupdate is integrated in SEP 12.1 & because of this luall.exe won't run manually.

You can enable liveupdate tab through the SEPM console for time being.

Screeshot is taken from the SEPM 11.x machine however settings will be the almost same in SEP 12.1

Allow user to launch liveupdate_0.JPG

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Parikshit Roy's picture

Hi,

In SEP 12.1 luall.exe will not work as liveupdate engine is integrated with the application. If you open Add/Remove programs in a managed SEP client you will no longer see liveupdate engine installed separately as you would see it in version 11.0.x

If the clients are managed by SEPM then by default they will get update from SEPM as per policy.

Please let us know the exact issue you are facing with liveupdate on manage clients along with the liveupdate policy that has been configured for the clients.

Parikshit Roy
Technical Support Analyst, Endpoint Security
Enterprise Technical Support
MCSE | SCTS |
Symantec Corporation
www.symantec.com

Don't forget to mark your thread a

Mithun Sanghavi's picture

Hello,

We've changed how LiveUpdate works with 12.1, so the old methods don't really work.

If you're looking at scripting LiveUpdate, you can script C:\Program Files\Symantec\Symantec Endpoint Protection\SepLiveUpdate.exe.

About LiveUpdate in Symantec Endpoint Protection version 12.1

https://www-secure.symantec.com/connect/articles/about-liveupdate-symantec-endpoint-protection-version-121

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Linas's picture

For the most part the managed clients are working great

I imaged several clients and I am deploying them and for some reason one client virus defs are out of date well they have the date I made the image and now a week later when I restore the image it keep complaining the virus defs are out of date I try update policy and I tried the Fix problems in the client and virus defs still out of date

Other pc’s I restored the image to work fine and virus defs are up to date for some reason this one pc is out of date and wont update

So if I run LiveUpdate it should update the virus defs but because it’s a managed client LiveUpdate is disabled

I had this problem in the past and run luall and fixed the problem but in the new version of end point protection luall doesn’t work any more

I don’t want to change policies for I client

So I was asking is there a way I could run LiveUpdate manually

And I think it’s answered but cannot test the client finally updated 4 days later

Unfortunately when in the middle up deploying pc’s you cannot wait 4 days and I just wanted a quick way to upgrade virus defs

I was told SepLiveUpdate.exe will run LiveUpdate

.Brian's picture

Start the process remotely with psexec

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Linas's picture

What is psexec?
How to run remotely do I run this from the AV server or can I run from any desktop
If I am on a client with out of date virus defs do I have to go to the AV server and run this?
I did a search on my pc for psexec it was found in VdefHub.zip from SEP11.0.5
And it was found in Sysinternals.
“ PsExec - execute processes remotely” but sadly the folder is empty?
And I don’t understand what am I running remotely?
And what will it do?

.Brian's picture

It just allows you to run processes on remote PCs

http://technet.microsoft.com/en-us/sysinternals/bb...

You can run it from your desktop. run psexec -h and it will show you all the commands to accomplish doing this.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Mithun Sanghavi's picture

Hello,

You may like to check this Downloadable Script to "Script to download Definitions from SEPM"

https://www-secure.symantec.com/connect/downloads/script-update-sep-121-installation-packages

NOTE: This is not provided neither supported by Symantec.

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Linas's picture

ok adding a dual videocard to an imaged system and found another client with outdated virus defs

tried to run sepliveupdate.exe

From run could not find the executable to run?

So I went to its path C:\Program Files\Symantec\Symantec Endpoint Protection\ sepliveupdate.exe

And tried to run from run

A dos window popped open and closed to fast to see

So I tried from a command prompt and now I see the error

Live update has been disabled. Please contact your system administrator for more information

Well it looks like this will not work

Linas's picture

Thanks for all the advice I don’t want to script or automate anything just want to run LiveUpdate once in a wile when I have to

SameerU's picture

Hi

In SEP 12.1 we cannot run the Luall command

Regards

Chetan Savade's picture

Hi,

Check whether definitions are corrupted on that machine or not.

How to determine if virus definitions of Symantec Endpoint Protection client (SEP) 11 or 12 Small Business Edition, are corrupted

http://www.symantec.com/docs/TECH97677

If definitions are corrupted check this article

How to clear out definitions for a Symantec Endpoint Protection 12.1 client manually

http://www.symantec.com/business/support/index?pag...

You can update the SEP client using intelligent updater.

http://www.symantec.com/security_response/definiti...

Check the SEP client connectivity with the SEPM, Policy number should be match.

Next time client should received definitions from the SEPM

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Chetan Savade's picture

Hi,

You can also refer this article to troubleshoot further.

Troubleshooting communication problems between the management server and the client

http://www.symantec.com/docs/HOWTO55017

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Linas's picture

Thanks I know Luall doesn’t work anymore I know thanks
Psexec is a nice command but won’t help because LiveUpdate is disabled by policy
Virus defs not corrupt they all wise seems to resolve after about 2 hours of being on and connected to the network
I imaged these pc’s and after a week on the shelf not connected there virus Defs go out of date
This is normal and no troubleshooting necessary
When I am deploying desktop’s I was hoping there was a quick way to manually update the Virus Defs
With a simple command
I guess since Luall is gone no longer possible
Thanks for all the help

Rafeeq's picture

I'm running SEP 12.1.2

when I go to start  run

type luall.exe

it works, may be I have SEPM also on the same box.

Untitled.png

.Brian's picture

Running 12.1.2 but does not work

"Windows cannot find 'luall.exe'. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search."

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Rafeeq's picture

I know that :)

 the machine has SEPM and SEP installed. So Luall.exe still exists but its only for SEPM.

Will add a screen shot to that. 

SEPliveupdate.exe works only when "Enable liveupdate option for users options is checked in Lu policy

"

doesn't work in Run , coz its not registered in system32 .

Earlier we had seen some issues where LU used to use internet, no matter what policy is configured. i think to mitigate that, they now stopped Lu from running on user machines.

Mick2009's picture

This article may be of interest to followers of this thread:

Can LiveUpdate be manually launched on a Symantec Endpoint Protection 12.1 client if it has been disabled within the Symantec Endpoint Protection Manager?
http://www.symantec.com/docs/TECH182586 
 

With thanks and best regards,

Mick

AjinBabu's picture

HI, 

If you disabled Live updating Launching option, you may not able to trigger it via luall.exe.

Regards

Ajin

Linas's picture

I think its 100% more important to have the option of updating virus definitions than ware the updates come form

If they come from the internet that’s fine with me

I am not updating 275 clients this way only one at a time for new installs or reimages

I really don’t like not having this ability