Endpoint Protection

Hi All,

Wil SEP client run scheduled scan after SymRmvScan used?

What i understand is it will remove all broken scan task in registry...

http://www.symantec.com/business/support/index?page=content&id=TECH105319

regards

Hi,

Please check below article:

Symantec AntiVirus scheduled scans continue to run after migrating to Symantec Endpoint Protection:

http://www.symantec.com/docs/TECH103868

It is mentioned that the "SymRmvScan" utility is designed to remove unidentified scans in existing Symantec Endpoint Protection client installations.

So it will remove all the unidentified scan from the registry & only the one assigned to the client will work properly. that's what my understanding..

This utility will remove all Symantec Antivirus and Symantec Endpoint Protection scans for all profiles on the system upon which it is run

hmmm lets say it managed to remove all scans key/profile in registry,

shouldn't the SEP client still follow the scheduled scan after it has downloaded latest policy from SEPM?

yes, once scans are removed. The managed clients will talk to the SEPM and download the latest policy. If the scheduled scan is listed, the sep client will scan on the next scheduled date/time.

hmm weird... looks like the policy is not updated/scheduled scan not started....

check out the sylink log, if the policy been updated. and check the registry.

Does we need to run the tool in administator profile? or a user profile will suffice?

Hi,

It depends on the rights provided to the user.

But it will be better if you run it with Admin Privilleges.

hmm user doesn't have admin rights...

i was curious because not all scan were removed by this tool...  so what is exact access requirement to run it?