Thurday 21st of July we received the following message from Symantec Customer Communications Team.
"Symantec will be releasing a live update for servers that use Symantec Endpoint Protection Small Business Edition (hosted) in relation to a recent Symantec security advisory.
Actions Required for Symantec Endpoint Protection Small Business Edition:
Manual Update: You can take immediate action to run the installer and update to the most current version of these agents for the Symantec Endpoint Protection Small Business Edition. For more information please see: https://support.symantec.com/en_US/article.HOWTO124395.html
Live Update: If you do not take action, the live update will begin on Thursday, July 21st. It’s a two-step process that will require a manual reboot for each step to complete the upgrade.
Note: If you are using redistributable packages, they have been deprecated and you will need to generate new ones.
As a best practice, Symantec strongly recommends that customers keep all their products updated."
Most of the servers are now up-to-date, but there are some servers that show status Unknown and after a while a LiveUpdate error message pops up, see attachment.
The message is telling me to logon to the server as an administrator, the account we use is domain administrator account, but that is not always working.
For testing I logged out and logged in with a local Administrator account, not the domain administrator account.
With the local administrator account LiveUpdate is running a executable called LUMSIWrapper.exe and after a couple of minutes I see that the software is being updated.
But we also have servers that are domain controller, and then you have no local administrators group, so for these servers I'm not able to logon as a local administrator, only domain administrator.