Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Limit liveupdate to run on clients at certain time of the day

Created: 13 Nov 2012 | 6 comments

Hello, I am looking for some assistance in configuring live update for one of our client groups. For this group of machines, I would like to configure LiveUpdate to run and install new virus definitions at 3am only. I looked at the LiveUpdate policy and configure it to run every day at 3:30am and randomize start time by + or - 1 hour. I thought this is all that I would need to do but I still see virus definitions being installed on endpoints throughout the day.

 

Can someone please assist in configure liveupdate correctly so that it will only load new virus definitions at 3:30am and not at any other time of the day?

Comments 6 CommentsJump to latest comment

.Brian's picture

Did you create this policy and apply it to ONLY this group? You will need to remove inheritance on this group and apply just this policy.

Also, these machines are getting their updates from the Internet and not the SEPM or a GUP? What you configured is only to go out to a Symantec LiveUpdate server.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Rafeeq's picture

That setting would mean that your clients will go to internet for definitions.

clients cannot take from manager at particular time.You dont have that setting in SEPM. clients will download defs when they talk to the manager\

Quite possible that you have enabled both. clietns not able to go out to internet, hence getting from the manager.

post a screen shot of the liveupdate policy

 

 

.Brian's picture

So this is setup for machines to go out to Symantec LiveUpdate servers at 3:30. Is this what you want?

As already mentioned there is no way to set a schedule to get updates from the SEPM. They update after they check in.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Rafeeq's picture

Uncheck "use the default management server " and keep "Use liveupdate server " CHECKED

this would make the cleints to get the update only from Internet and NOT from SEPM.

Make sure they have internet access