Endpoint Protection

Some of our clients (12.1) have multiple schedule scan running and I am unable to stop them. It looked like the first schedule scan was stuck and the sebsquent scans were stuck after. However, I can't seem to stop these scans. When I reboot, the scans are still there. Also, how can I identify what is the cause of these stuck scans?

Thanks

We only have one schedule scan defined for these PCs and it is done by the SEPM server. So your solution doesn't seem to apply to our situation.

only one scan run on the system.

if you have stopped the SEP service while scan, it might be showing as running and it does not have end date/time of scan.

to confirm this you can start the next scan.

Is this laptop user? chances are getting into hibernation.

hi,

Check this thread

https://www-secure.symantec.com/connect/forums/disabling-triggered-scans-sep-121

Pete, some of them are laptops and some are destops.

Ashish, is there anyway I can remove these scan without using registry. In fact, I am hoping to be able to resolve the issue by the SEPM as there might be potentialy few ten machines that has similar problem.

Thanks

was this ever solved?

we seem to have this problem on 2 older servers upgraded from win2003 to win2008. for a long time I was wondering why almost whenever I want to restart either of those servers it asks me if I want to cancel a scan?

Recently disabled the Admin Scheduled scans on those machines via SEPM and yet the problem persists.

I cannot edit the registry as per Ashish solution (error "cannot create value: error writing to registry"), neither SEPM nor SEP clients show any schedule for other scans ... how to forcefully remove those hidden scans from past old versions?

hi,

Try to disable tamper protection after edit the registry..

thanks, that worked. was able to create teh registry key disallowing any kind of users scans.

I have to use the clean wipe utilty to remove SEP and reinstalled SEP. After that, the problem was fixed.