Endpoint Protection

Hi,

We are try to add NTP and PTP  to our company's RU5 Client also upgrade from RU5 to RU6 MP2. In our test group, wen have one big issue.

We are running Windows 7 32bit.

1. If we assign a package to a 10 PCs test group use auto-upgrade feature which recommended by Symantec, here come the problem.

    > Client successes upgrade to MP2 which only have AV show up in interface.

    > Reboot the PC, after log in again. Looks like client been uninstalled and reinstalled once more time.Also successes upgrade to MP2.

    > Problem: NTP state stuck in "Waiting for Updates" forever.AV. PTP update is correct.

2. If I export a installation package with NTP and PTP, do a manual client upgrade. Everything update OK from SEPM. Assume it also works for GPO or SCCM,

3. If I allow client to do liveupdate form symantec liveupdate server during or after upgarde process instead of SEPM, NTP will update.But most of our client have no internet access,so this is not a option.

4. support tools report "WPShelper service not running", also winhelper.sys is missing from system32\driver folder.windows registry missing "LEGACY_WPSHELPER" and "Service\WPShelper\Enum"entry.

5. It feels like NTP need a initial def to start with(even update?) like ipsdef.zip in exported package. But auto-upgrade try to keep the current IPS def which is none in AV only client.

Is there any way to make auto-upgrade feature working? because is much easier than GPO or SCCM, and I don't have ask other administrators for help. Thanks in advance.

Regards

How  much time  have you waited ..in other words, low  long you have waited  for NTP to get  updated?

Also, try  one  thing:

After the client  auto-upgrades( and NTP still in waiting for updates state), do an update  content from SEPM, and then see if  NTP updates  or not...

I have waited for 3 days. in this period, I have done  alot force update content from SEPM, restart PCs, smc -stop/start. all useless. Only way to fix it is do a liveupdate from symantec liveupdate server.after that I can switch back to SEPM update. Or do a manual install use exported package.

hmm...very surprising...could you please get me the log.livweupdate, when the  NTP stays in waiting for  update state???

Hi vasu123,

Thanks for your reply.

But after spent several sleepless night with this issue, I surrendered. I setup a internal LUA. and change liveupdate policy to both SEMP and LUA server(Without Schedule) before roll out the update. This looks like fixed the issue.anyway looks like liveupdate server is the key.

Regards