Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

SEP 12.1.2: Services are always stopped

Created: 21 Jul 2013 | 21 comments
D@ry1's picture

Hey guys,

We noticed that there are endpoints with sep services always stopped. Even if it they areon automatic.

Anyone here know why?

Thanks,

Operating Systems:

Comments 21 CommentsJump to latest comment

pete_4u2002's picture

does restarting the services manually keep the services on?

what is the error when you try to start the services?

does repair help to resolve the issue?

D@ry1's picture

Yes when we restart the service it comes on but after restarting the machine it comes back off.

D@ry1's picture

Yes when we restart the service it comes on but after restarting the machine it comes back off.

Sumit G's picture

This issue is only on winxp systems?

Try to start the service after uncheck the “Allow service to interact with desktop” under the service

 

Then restart the system and check service will again stop or not.

Regards

Sumit G.

Rafeeq's picture

Is it happening on windows7 or on Server OS?

is the WMI service started or stopped?

D@ry1's picture

As of this time all of it are windows xp.. anything?

Thanks,

Rafeeq's picture

can you try to run proces explorer on one of the affected pcs to see why teh automatic startup services are failing?

D@ry1's picture

How can I run the process explorer?

Rafeeq's picture

simillar to this, 

http://blogs.technet.com/b/markrussinovich/archive/2010/01/13/3305263.aspx

I would also like to know the state of the service after reboot. Does the state is automatic delayed or automatic or manual or disabled?

Do you have any group policy to disable the services?

.Brian's picture

Have you tried running a repair on the client via add/remove programs?

Does running the SymHelp tool show any errors?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

D@ry1's picture

What errors should I check to be exact?

.Brian's picture

Did the SymHelp tool reveal any? It would show if it did.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

D@ry1's picture

That's the weird part, it didnt show any error at all, just a warning that 12.1.3 is already up and that I can upgrade anytime I want.

D@ry1's picture

Yes we already have done that, and no Symhelp log errors was found.

Thanks,

Mithun Sanghavi's picture

Hello,

Is this issue occurying on all Windows XP clients?

Could you please let me know if "Symantec Endpoint Protection" and "Symantec Management Client" services are both stopped?

Do you have a Local System Account?

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

D@ry1's picture

Yes, only on XP machines so far, and yes "Symantec Endpoint Protection" and "Symantec Management Client" services are both stopped.

 

We have local account, admin account to be exact, but what users normally use is their domain account you know, for email and other things.

Mithun Sanghavi's picture

Hello,

Your issue would require a root cause analysis.

I would suggest you to please Create a case with Symantec Technical Support Team and PM me your case #.

How to create a new case in MySupport

http://www.symantec.com/docs/TECH58873

Phone numbers to contact Tech Support:-

Regional Support Telephone Numbers:

  • United States: 800-342-0652 (407-357-7600 from outside the United States)
  • Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
  • United Kingdom: +44 (0) 870 606 6000

Additional contact numbers: http://www.symantec.com/business/support/contact_techsupp_static.jsp

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Chetan Savade's picture

Hi,

Thank you for posting in Symantec community.

There is nothing specific to mentioned issue in SEP 12.RU2 later fix notes.

Total how many XP computers are affected?

Have you tried with SEP client repair?

Do you see any error in eventviewer. Try to run Symhelp to find out possible root cause.

http://www.symantec.com/docs/TECH170752

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

D@ry1's picture

Yes we already tried to repair it and it didint work, we already use the symhelp too, as I replied above.

Do we have any tool to detect viruses that are undetected on SEP? we scan tha machine after manually start the SEP services and it didnt found anything, after restarting its off again.

.Brian's picture

You can try Symantec Power Eraser

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

D@ry1's picture

I'll reply a feedback later.

 

Thanks,