Important services started and set to Manual without the option to change
Created: 22 Jan 2013 | Updated: 22 Jan 2013 | 20 comments
This issue has been solved. See solution.
In the most recent version of SEP, I have come across this a couple of times, the services are there, but they are started and set to manual, you can not stop or restart the service and you can not change the order from manual to automatic. This is really annoying if I have to make some changes to a remote PC or server. Why is this like this now and can it be changed? I think we should have the option to select the service(s) and how it works.
The one I really dislike is the fact that the management client is set up like this.
Discussion Filed Under:
Comments 20 Comments • Jump to latest comment
What happens when you right click it and select Properties?
From here, you can set it to Automatic, Manual or Disabled
SEP Knowledge Base
Endpoint SWAT
I can make the change to automatic, but then I am denied.
Turn off tamper protection and give it another try.
SEP Knowledge Base
Endpoint SWAT
I hate tamper protection, it has been off since day 1...
Seems that the ability to change (or not change) is hard-coded within SEP. You can look at the SmcService folder in the registry located under HKLM\System\CurrentControlSet\Services
You would probably need to edit the Start or Type REG_DWORD value but I'm not exactly sure which
SEP Knowledge Base
Endpoint SWAT
DO NOT like this change!!!!
With the ability to stop the SMC service from a remote location, I could at least get out the correct Sylink.xml to client PC's and servers, now with this change, I will have INTERUPT a user or go on a server via a remote connection. I am NOT happy with this at all.
I just confirmed you can do it in the registry. Change the value to one of the below:
2 = Automatic
3 = Manual
4 = Disabled
But it looks to be hard coded
SEP Knowledge Base
Endpoint SWAT
Change, what exactly? Where? I am at the services folder in the registry then that is where I trail off and have no clue.
Under Services, you should see another folder called SmcService
When you click on it, you should see a key called Start
Change that to 2 and click OK
Check the service again, should now be showing automatic
SEP Knowledge Base
Endpoint SWAT
Cannot edit Start: Error writing the value's new contents.
And tamper protection is off? I got the same message but once I turned off tamper protection I could make the change.
Are you admin of the box?
SEP Knowledge Base
Endpoint SWAT
By policy Tamper protection is over. I never used it.
I am going to try this as the local admin
Changing it to 2 only made the service automatic, I want the ability to stop and restart that service WITHOUT accessing a users PC.
Even on MY PC the option is greyed out.
I do not like this change at all!!!
The only thing I can think of is using the SEPM to replace it remotely.
I have a script which restarts SMC but not stop than start
SEP Knowledge Base
Endpoint SWAT
You can replace the sylink file automatically with 12.1.2. There is now an option to do this
On the Client page, click Add Client
Select the last option at the bottom "Communication Update Package Deployment"
This will do it for you now.
Check this article:
Restoring client-server communications by using a client installation package
SEP Knowledge Base
Endpoint SWAT
Nevermind just found it...
Go to the key I mentioned above.
Click on the Start REG_DWORD and change the value to 2
Open services.msc and SMC should now be set to automatic
SEP Knowledge Base
Endpoint SWAT
Sorry, I am very lost at this point.
Its is hard coded - and it hasn't changed much since the first release of 12.1 - you cannot turn of or on the SMC from services console - this can only be done with admin right from command prompt:
* smc -stop
* smc -start
..or in case it is not working on some systems:
http://www.symantec.com/docs/TECH177584
I used to be able to do so, and by doing smc -stop and smc -start, that requires actually BEING on the PC or server that needs to have the update, which is intrusive to their work.
Would you like to reply?
Login or Register to post your comment.