Endpoint Protection

 View Only

  • 1.  No new definitions in SEPM after moving server to the new domain

    Posted May 28, 2010 12:27 PM
      |   view attached

    After migrating SEPM server into new domain in AD, SEPM cannot take downloaded patches and definitions. I see following error messages in the attached log file:
     
    Added package to cache...
    LiveUpdate couldn't expand replacement path [sesmvirdef32InstallDir].
    Progress Update: PATCH_ERROR: Patch File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Updt219\1275055233jtun_nav2k8enncur25.m25.full.zip", Script File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Updt219\sesmv32.dis", HR: 0x802A0006
    HR 0x802A0006 DECODE: E_DIS_SCRIPT_SYNTAX_ERROR
     
    What is wrong?

    Attachment(s)

    txt
    Log.LiveUpdate.txt   808 KB 1 version


  • 2.  RE: No new definitions in SEPM after moving server to the new domain

    Posted May 28, 2010 12:40 PM

    Check this -


    Symantec Endpoint Protection Manager (SEPM) reports error "LiveUpdate finish with Return code = 4" and LU error 1875, 1845, 1853, 1806 are present in Log.LiveUpdate.

    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/4f99fce9e58700858025751600347124?OpenDocument



  • 3.  RE: No new definitions in SEPM after moving server to the new domain

    Posted May 31, 2010 04:20 AM

    Thanks for your answer, but:
     
    1. Under Win2k8 those setting looks little different.
     
    2. I used referenced document to check my DCOM settings:
     
     
    DCOM->My Computer Properties:
     
    Tab "Default Properties"
     
    Enable Distributed COM on this Computer
     
    Default Authentification Level: Connect
    Default Impresionation Level: Identify
     
    Tab "COM Security"
     
    Access Permissions -> Edit Default
     
    SELF, SYSTEM, Administrators(...\Administrators) and INTERACTIVE  ALLOW
     
    Launch and Activation Permissions -> Edit Default
    SYSTEM, Administrators(...\Administrators) and INTERACTIVE ALLOW LAUNCH & ACTIVATION LOCAL & REMOTE
     
    I still get the same error, even after restarting the server.


  • 4.  RE: No new definitions in SEPM after moving server to the new domain

    Posted May 31, 2010 04:29 AM
    Reinstall liveupdate and try

  • Click Add or Remove Programs.
  • Click LiveUpdate.
  • Click Change/Remove.
  • Follow the on-screen instructions to uninstall LiveUpdate.
  • In Windows Explorer, delete the following folders if they are present:


    • C:\Program Data\Symantec\LIveUpdate\Downloads
    • C:\Program Files\Symantec\LiveUpdate
    Install Liveupdate fron cd1\sep
  • To register SEPM with LiveUpdate:
    1. Click Start, then Run.
    2. Type cmd, then click OK. This will bring up a command prompt.
    3. At the command prompt type cd and the path to lucatalog.exe. By default the command would be:

      cd C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin
       
    4. Type lucatalog.exe -update


  • 5.  RE: No new definitions in SEPM after moving server to the new domain

    Posted May 31, 2010 05:57 AM

    Still the same error.


  • 6.  RE: No new definitions in SEPM after moving server to the new domain
    Best Answer

    Posted Oct 28, 2010 11:49 AM

    A proxy user configured for the live update had no rights on my server.

    Solution: Different user from local administrators group was used to get updates from the Symantec.