Endpoint Protection

 View Only

  • 1.  SEP 11.0.6A "Symantec Management Client" does not start

    Posted Jun 23, 2010 07:39 AM

    We are making a new Windows 7 image for our VDI env.
    We are using Hyper-V, Cirtrix XenDesktop and Windows 7 Dutch as our vdi client.

    I looked up some information if you want to install SEP into a vdi concept:
    Before provisioning i use the following before shutdown in a script:
    Below has to be done, because the hardware ID is always the same and has to be reset, this works fine by the way!
    If Delvalue ("$HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink","SySoftk") = 0 Endif
    If Writevalue ("$HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink","HardwareID","","REG_SZ") = 0 Endif
    SHELL 'C:\Windows\System32\cmd.exe /c DEL "C:\program Files\Common Files\Symantec Shared\HWID\sephwid.xml" /F /S /Q >nul 2>&1'

    http://www.thegenerationv.com/2010/04/symantec-endpoint-protection-on.html
    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008031411460648
    http://www.symantec.com/connect/forums/installing-sep11-xendesktop
    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/4cbced35b07c7f3688256e43006cde81?OpenDocument
    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007110510364248
    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/7c87b2b11e0d18c48025765000518741?OpenDocument
    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007110510364248

    When i make a unattend installation of the SEP client and then install it in the Windows 7 Unattend installation
    at first the SEP icon works and shows up even after a reboot.
    But when i provision the client to XenDesktop the SEP client does not appear.
    The service "Symantec Management Client" is on automatic and does start manual.
    Within msconfig all is oke
    I get an error in the systemlog:
    ID7019 The Symantec Management Client-service is depended on a service ina group that starts later. Change the dependency of the service.
    All the depended services are started.
    If i change the dependency to only the "Print Spooler" which starts later it still does not start and gives me the same error.
    If i uninstall and install the SEP package it is still not showing up.

    Any idears???






  • 2.  RE: SEP 11.0.6A "Symantec Management Client" does not start



  • 3.  RE: SEP 11.0.6A "Symantec Management Client" does not start

    Posted Jun 23, 2010 10:59 AM
    wel i had to change the service like this:
    ; Symantec Endpoint Protection fix startup service "Symantec Management client".
    If WriteValue ("$HKLM\SYSTEM\CurrentControlSet\Services\SmcService","Group","PNP_TDI","REG_SZ") = 0 EndIf

    then i worked again...

    for the double hardware id's i now use a startup script:

    $HKLM="HKEY_LOCAL_MACHINE"

    Function RegASCIItoHEX($data)
        dim $return, $i
        $return = ""
        for $i = 1 to len($data)
            $return = $return + dectohex(asc(substr($data,$i,1)))+ "00"
        next
        $return = lcase($return) + "00000000"
        $regASCIItoHex = $return
    endfunction


    $SEPHWid=RegASCIItoHEX(%COMPUTERNAME%)

    If Writevalue ("$HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink","HardwareID","$SEPHWid","REG_SZ") = 0 Endif
    If Delvalue ("$HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink","SySoftk") = 0 Endif
    SHELL 'C:\Windows\System32\cmd.exe /c DEL "C:\program Files\Common Files\Symantec Shared\HWID\sephwid.xml" /F /S /Q >nul 2>&1'