Endpoint Protection

 View Only
  • 1.  Managed SEP Clients will not update without a user logged in

    Posted Mar 18, 2012 12:34 PM

    The title pretty much says it all.  I have a ton of systems with out of date virus definitions being reported, I wrote a custom app that repairs several other things, i added some SEP fixes in to it as well.  Primarily the fix updates sylink and if the definitions are old enough it follows the steps on clearing corrupted definitions for SEP.  This fix seems to cause most clients to update without any real issue, but i noticed a handful that even giving them a few days to update they did not get updated.  I started troubleshooting and found that if i logged in to these systems via RDP and ran smc.exe or opened the GUI and clicked Fix All, or just gave it 20 minutes it would update the definitions.  I tried running smc.exe remotely via psexec, also a custom tool to create a process on a remote machine.  Neither allowed the system to update.   Running luall will trigger a liveupdate but it will attempt to update from symantec's public live update servers, which on our network cannot be reached. 

     

    Does anyone know of any way to trigger an update on a Managed SEP client and have it download from the Internal update sever that is set in sylink? 



  • 2.  RE: Managed SEP Clients will not update without a user logged in

    Broadcom Employee
    Posted Mar 18, 2012 12:52 PM

    the LU policy within SEPM for the group will trigger the liveupdate on client and will reach the source.



  • 3.  RE: Managed SEP Clients will not update without a user logged in
    Best Answer

    Posted Mar 19, 2012 03:43 AM

    I think link should help you.

     

    http://www.symantec.com/business/support/index?page=content&id=TECH96147

     

    Please mark this as a solution if it helps you.



  • 4.  RE: Managed SEP Clients will not update without a user logged in

    Posted Mar 19, 2012 10:30 AM

    Thanks for the replies, i believe this matches my symptoms.  Unfortunately our network is always a bit behind on updates due to the size of it, but perhaps we can try the setting change on the server.  I forwarded the information to those that can change the settings.  Much Appreciated.



  • 5.  RE: Managed SEP Clients will not update without a user logged in

    Posted Mar 19, 2012 04:38 PM

    Hi.

    I hope the AD sync is your problem as per the link above.

    SEP v11 RU5 and earlier also had the same problem. In RU6 MP2 there is a specific bug fix (ID #1978998) for this very problem. So as usual & same as the AD article, upgrade your clients.

    In fact, if you want reasons to make your case to upgrade, have a read here: http://www.symantec.com/docs/TECH103087