Endpoint Protection

For some reason I am only having this problem on one of our computers. This computer is unmanaged, so I have it set to automatically recieve updates from the symntec web server. The problem is that live update will not start automatically. I can manually click update, and it will connect to the server and download and install the updates with no problem. The problem is that it will not start by itself. It used to up until a couple of months ago. The user could not recall making any changes. I tried to uninstall and reinstall the endpoint protection program. It did not resolve the problem. All help is appreciated. Thank you, Ross.

create a windows task
How to schedule LiveUpdate or LiveUpdate Administrator to run more than once a day
http://service1.symantec.com/SUPPORT/ent-security.nsf/a7d8859c077770e7882573410063494b/7126f085b9e9a62d88256e7b006f5eef?OpenDocument

or 
check dcom permissions as per this doc

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2002082005441848

To edit the Default Access Permissions using Dcomcnfg.exe

On the Windows taskbar, click Start > Run.
In the Open box, type the following text:

dcomcnfg.exe

Click OK.
Do one of the following:
In Windows 2003/XP, expand Component Services, and then expand Computers. Right-click My Computer, and then click Properties. On the Default COM Security tab, under Access Permissions, Edit Default.
In all other versions of Windows, on the Default Security tab, under Default Access Permissions, click Edit Default.
The Access Permission pane is normally blank. If the window is not blank, make sure that the Administrators, Interactive, and System accounts are set to Allow Access. .

I did not get a chance to view the dcom permissions yet, but as for creating the scheduled update, I could not find the file: vpdn_lu.exe, but what I used was LUALL.exe. It will open up liveupdate at the specified time, but requires the user to click next. So, in order to make it work without user input the instructions say to add a /s or /silent at the end of the run command. Once I add the /s or /silent the task will no longer start. "status: could not start"

Ok , so it means that the issue is not with the Schudler.

Correct the DCOM  and reboot the machine 

Im sorry. The liveupdate opens, but does not run without user input. Heres the run command:  
"C:\program files\symantec\liveupdate\luall.exe" /s   

I think there must be a different .exe to open rather than LUALL.exe, or possibly a different command other than /s or /silent. I could not find the VPDN_LU.exe
 

open control pannel
open liveupdate, make it to express mode..i think its now in interactive mode.

Alright ill check that. The DCOM settings were set properly, the users all have the allow persmissions boxes checked. I noticed under the default properties tab that "enable COM internet services on this computer" box is unchecked, should that be enabled?

its not necessary ; dont enable it.

Ok. I created a new scheduled task to run

"C:\program files\symantec\liveupdate\luall.exe" /s

as a local administrator, and by enabling express mode in live update in the control panel, the liveupdate program automatically opens up, runs, and closes with no user input. Updates were successful.

However, I was logged in as a local admin. I set the task to run a 6:30pm after I tested it at 3pm successfully. At 6:30pm, no one will be logged on to the computer. Will the task still run? or does someone need to be logged on for it to open up and run?

it will run using your account ( admin) however does not need anyone to be logged in
it runs as per the schedule.
thats why liveupdate gets downloads to 
c:\docs and settings \all users folder ( no matter who is logged in or not)
will run successfully.