Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

SAV 10.1 MR8 LockupdatePattern

Created: 03 Mar 2010 • Updated: 12 Sep 2010 | 11 comments
Hklm\software\intel\virusprotect6\currentversion\clientconfig\patternmanager
Lockupdatepattern             dword value is 1
Lockupdatepatternscheduling  dword value is 1
 
hklm\software\intel\virusprotect6\currentversion\domaindata\clientconfig\pattermanager
Lockupdatepattern             dword value is 0
Lockupdatepatternscheduling  dword value is 0
 
hklm\software\intel\virusprotect6\currentversion\patternmanager
Lockupdatepattern             dword value is 1
Lockupdatepatternscheduling  dword value is 1

shouldn't the registry key be the same?  this registry is on the primary server. 

If it should be, how do i configure that all values are the same?

Comments 11 CommentsJump to latest comment

ailyn's picture

this is related to this thread https://www-secure.symantec.com/connect/forums/liveupdate-button-will-not-enable.

In addition, I've changed this setting in SSC but no luck.  I've changed the registry key from 1 to 0.

The dword value always change back to 1.

Rafeeq's picture

if your clients are communicating with server then they will revert the values as they are reading the settings from parent servers
You are trying to change this setting for clients or secondary server?  

try this

Restricted users cannot run LiveUpdate under Windows 2003/XP/2000

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2000100614565548?Open&src=tranus_ent_sl

ailyn's picture

I have that enablealluser setting on the secondary server. I've also tried change the setting on the secondary server but to no luck, it too is reverted back.

there must be trigger or flag that is reversing these registry changes. Any ideas?

Rafeeq's picture

 you are trying to do this for a server or for a cleint?
open ssc
tools
symantec system center options
clients tab
check allow direct configuration of clients
now in ssc select the client and check liveupdate options
i think your clients are in client groups, if they are in client groups all the settings will be overridden...

http://service1.symantec.com/support/ent-security.nsf/docid/2002083007264348?Open&src=tranus_ent_br
 

ailyn's picture

you are trying to do this for a server or for a cleint?  Server.

I checked the SSC options on the server and it is checked for "allow direct config..."

Rafeeq's picture

is this server inside any client groups?
in SSC do you have any client groups? 

ailyn's picture

server does not have any client groups nor does the SSC.

ailyn's picture

If i uncheck the "do not allow client to manually launch liveupdate", which regkey does it hit?

Is it this regkey?
hklm\software\intel\virusprotect6\currentversion\domaindata\clientconfig\pattermanager

Lockupdatepattern             dword value is 1
Lockupdatepatternscheduling  dword value is 1

Or is it this regkey?

hklm\software\intel\virusprotect6\currentversion\patternmanager
Lockupdatepattern             dword value is 1
Lockupdatepatternscheduling  dword value is 1

The goal is to enable the client to do a liveupdate.

I'm also hearing that HBSS is restricting the registry change.  Has anyone heard of this?

Rafeeq's picture

its this key
Lockupdatepattern             dword value is 1 

ailyn's picture

Is the regkey hitting under this path hklm\software\intel\virusprotect6\currentversion\domaindata\clientconfig\pattermanager?

Or the hklm\software\intel\virusprotect6\currentversion\patternmanager?

Or should it hit both values?

Rafeeq's picture

domain data is for server
currentversion is for client, are u able to make the changes to registry now  ?