I have such a problem..

We had a SEPM 11 MR1. Suddenly (I don't know why and maybe will never know) the "Home", "Monitor" and "Reports" pages disappeared, and LiveUpdate didn't work automatically. But if I start LiveUpdate manually (from %programfiles$\symantec\liveupdate\luall.exe) it works (there were no errors). Nothing could help from symantec site. I updated MR1 to MR3. The result was the same.

The problem with pages was resolved by changing permissions for anonimous connection in IIS default web-site from IUSR_<server_name> account to local admin account.

But LiveUpdate didn't start to work. Instead, updates from manual procedure stopped to deliver to clients, however the policies were updated regularly.

If I started luall.exe, the update works. But updates don't deliver to clients again.

If I started LiveUpdate in console (admin - servers - site - Run LiveUpdate) then there was an error

Error: LiveUpdate encountered one or more errors. Return code = 4
 

There is an error in scm-server-0.log:

2009-03-03 18:30:43.920 SEVERE: ================== Server Environment ===================
2009-03-03 18:30:43.920 SEVERE: os.name = Windows 2003
2009-03-03 18:30:43.920 SEVERE: os.version = 5.2
2009-03-03 18:30:43.920 SEVERE: os.arch = x86
2009-03-03 18:30:43.920 SEVERE: java.version = 1.5.0_15
2009-03-03 18:30:43.920 SEVERE: java.vendor = Sun Microsystems Inc.
2009-03-03 18:30:43.920 SEVERE: java.vm.name = Java HotSpot™ Server VM
2009-03-03 18:30:43.920 SEVERE: java.vm.version = 1.5.0_15-b04
2009-03-03 18:30:43.920 SEVERE: java.home = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\jdk\jre
2009-03-03 18:30:43.920 SEVERE: catalina.home = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat
2009-03-03 18:30:43.920 SEVERE: java.user = null
2009-03-03 18:30:43.920 SEVERE: user.language = ru
2009-03-03 18:30:43.920 SEVERE: user.country = RU
2009-03-03 18:30:43.920 SEVERE: scm.server.version = 11.0.3001.2224
2009-03-03 18:30:45.702 SEVERE: ================== StartClientTransport ===================
2009-03-03 18:30:46.030 SEVERE: Schedule is started!
2009-03-03 18:30:47.030 SEVERE: StateCheckpointTask connect to secars failed: SERVICE NOT AVAILABLE

secars test is running ok. As I know, secars respond for content updates and the problem is in permissions because the secars service is running.

SesmuLU.log:
 03 09, 07:13:30 INFO(High)  SesmLu: ********************************************************************************
*******************************
мар 03 09, 07:13:30 INFO(High)  SesmLu: ****                                Starting New SesmLu Session                                            ****
мар 03 09, 07:13:30 INFO(High)  SesmLu: **** Platform: Microsoft Windows Server 2003
мар 03 09, 07:13:30 INFO(High)  SesmLu: **** SesmLu Version: 11.0.3001.2224
мар 03 09, 07:13:30 INFO(High)  SesmLu: ********************************************************************************
******************************
мар 03 09, 07:13:30 INFO(Med)  SesmLu: PreSession callback...
мар 03 09, 07:13:30 INFO(Med)  TomcatServerXml: Entered Init().
мар 03 09, 07:13:30 INFO(Med)  SesmLu: http://localhost:9090/servlet/ConsoleServl...lishLuInventory
мар 03 09, 07:13:30 INFO(Low)  SesmLu: <?xml version="1.0" encoding="UTF-8"?>
<Response ResponseCode="0"/>

мар 03 09, 07:13:30 INFO(Med)  ProductUtil: Response code: 0x0
мар 03 09, 07:13:30 INFO(Med)  SesmLu: Server successfully published LU inventory.
мар 03 09, 07:13:30 INFO(Med)  SesmContentCatalog: Entered Init().
мар 03 09, 07:13:30 INFO(Low)  ProductUtil: Data root = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data
мар 03 09, 07:15:05 INFO(Med) catalogen SesmLu: PreSession callback... finished. Result: 0
мар 03 09, 07:15:06 INFO(Med)  SesmContentCatalog: Entered Init().
мар 03 09, 07:15:06 INFO(Low)  ProductUtil: Data root = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data
мар 03 09, 07:15:06 INFO(Med) sesmAvClient32en SesmLu: PostSession callback...
мар 03 09, 07:15:06 INFO(Low) sesmAvClient32en SesmLu: PrepareLUDownloads was not run. Skipping PostSession work.
мар 03 09, 07:15:06 INFO(Med)  SesmContentCatalog: Entered Init().
мар 03 09, 07:15:06 INFO(Low)  ProductUtil: Data root = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data
мар 03 09, 07:15:07 INFO(Med) sesmAvClient64en SesmLu: PostSession callback...
мар 03 09, 07:15:07 INFO(Low) sesmAvClient64en SesmLu: PrepareLUDownloads was not run. Skipping PostSession work.
мар 03 09, 07:15:07 INFO(Med)  SesmContentCatalog: Entered Init().
мар 03 09, 07:15:07 INFO(Low)  ProductUtil: Data root = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data
мар 03 09, 07:15:07 INFO(Med) sesmSnacClient32en SesmLu: PostSession callback...
мар 03 09, 07:15:07 INFO(Low) sesmSnacClient32en SesmLu: PrepareLUDownloads was not run. Skipping PostSession work.
мар 03 09, 07:15:07 INFO(Med)  SesmContentCatalog: Entered Init().
мар 03 09, 07:15:07 INFO(Low)  ProductUtil: Data root = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data
мар 03 09, 07:15:08 INFO(Med) sesmSnacClient64en SesmLu: PostSession callback...
мар 03 09, 07:15:08 INFO(Low) sesmSnacClient64en SesmLu: PrepareLUDownloads was not run. Skipping PostSession work.
мар 03 09, 07:15:11 INFO(Med) catalogen SesmLu: PostSession callback...
мар 03 09, 07:15:11 INFO(Low) catalogen SesmLu: PrepareLUDownloads was not run. Skipping PostSession work.

After MR3 installation the LiveUpdate software weren't updated, and the clients weren't upgraded too. So, they worked as they did in MR1.
 

SEPM and IIS were installed under local admin account.

The server cann't be restarted.

Where can I find the source of problems? Should I install LiveUpdate from MR3 installation files? and what shoul I do with clients?