Endpoint Protection

 View Only

  • 1.  Restart required - SEP component has a task to complete from install.

    Posted Jun 19, 2014 05:50 AM
      |   view attached

    Environment:

    SEPM 12.1.4104.4130 (RU4 MP1a) - Win 2008 Server R2 SP1 Entrp Ed

    SEP 11.0.6300.803 (RU6 MP3) - Win 2000 Server SP4

    Activity:

    Changing reporting from SEPM 11 to SEPM 12.1.4

    Issue:

    Noticed one of the SEP on Win 2000 server requiring restart in the Restart Required column while one of them does not need the restart.

    PFA capture. The column states "Yes, SEP component has a task to complete  from install."

    The group's Install Package tab is empty. No upgrade initiated.

    Log -> System - > Client-Server Activity : Shows "Client has downloaded auto-upgrade" when all clients were added / registered to the new SEPM 12.1.4's group.

    Like to know the below:

    1. Which component is pending install? Why should it install a new component? How to check the same on logs?

    2. When no upgrade is initiated, why does the clients log "Client has downloaded auto-upgrade" ? Did it only download SEP 12.14 as it states and keeps a copy in the system?



  • 2.  RE: Restart required - SEP component has a task to complete from install.

    Posted Jun 19, 2014 05:56 AM

    Was there any package assigned and then removed?



  • 3.  RE: Restart required - SEP component has a task to complete from install.

    Posted Jun 19, 2014 06:00 AM

    Right click on the client symbol, click "Edit Properties",  and see if there is a error message ("Deployment status" etc.



  • 4.  RE: Restart required - SEP component has a task to complete from install.

    Posted Jun 19, 2014 06:00 AM

    No packages assigned.



  • 5.  RE: Restart required - SEP component has a task to complete from install.

    Posted Jun 19, 2014 06:02 AM

    Deployment Status: No status reported.

    Deployment Message: empty

     



  • 6.  RE: Restart required - SEP component has a task to complete from install.

    Posted Jun 19, 2014 06:11 AM

    can you check the system log on the client  to see if it has downloaded something, 



  • 7.  RE: Restart required - SEP component has a task to complete from install.

    Posted Jun 19, 2014 06:23 AM

    Check the System log on the client, what's it show?



  • 8.  RE: Restart required - SEP component has a task to complete from install.

    Posted Jun 19, 2014 06:32 AM

    Rafeeq / Brian,

    It states the below log:

    Time Stamp Event Type
    19/06/2014 08:05:54 Server received log from client
    19/06/2014 08:05:48 Client has downloaded policy
    19/06/2014 05:53:19 Server received log from client
    19/06/2014 05:48:16 Server received log from client
    19/06/2014 05:47:38 Server received log from client
    19/06/2014 05:47:25 Client has downloaded the content package
    19/06/2014 05:47:23 Client has downloaded sylink.xml
    19/06/2014 05:47:22 Client has downloaded Intrusion Prevention policy
    19/06/2014 05:47:20 Client has downloaded policy
    19/06/2014 05:47:20 Client has downloaded auto-upgrade
    19/06/2014 05:47:14 Client has registered
    19/06/2014 05:47:14 The client computer has been added to the group


  • 9.  RE: Restart required - SEP component has a task to complete from install.

    Posted Jun 19, 2014 11:39 AM

    this is why it needs a reboot

    19/06/2014 05:47:20

    Client has downloaded auto-upgrade

     

     

    indeed there was a package assigned to this client. 

    open sepm

    monitors - logs

    select system

    check the client server activity for this server, it would say the same..

     

     



  • 10.  RE: Restart required - SEP component has a task to complete from install.

    Posted Jun 20, 2014 12:47 AM

    Rafeeq,

    Think you might need to read my post twice. Those things you mentioned are my observations on my post. Please dont tell that those are the causes for the issues.

    Thanks.



  • 11.  RE: Restart required - SEP component has a task to complete from install.

    Posted Jun 20, 2014 02:09 AM

    The client has indeed downloaded an upgrade package, from SEPM we cant say if any admin assigend any package.. Do you see Auto upgrade service in service.msc? when packages are downloaded from SEPM it will be under c:\windows\temp or temp folder...and Auto upgrade service is created in services.msc, if the client is getting updates from internet, its quite possible that it might have downloaded the package from internet.. not sure for 11.x versions.. can you log in to the client and check the auto upgrade service and see the client version if its been updated from any previous one?