Endpoint Protection

 View Only

  • 1.  SEP agent reinstalled without NTP, the reports still show NTP on

    Posted Feb 02, 2011 07:34 AM

    Hi,

    The SEP agent (RU5) was removed and installed again on few servers, this time without the NTP component, however the reports are still showing NTP on. What is the resolution for this issue?

    Thanks.



  • 2.  RE: SEP agent reinstalled without NTP, the reports still show NTP on

    Posted Feb 02, 2011 08:05 AM

    Have you rebooted, after  you uninstalled?



  • 3.  RE: SEP agent reinstalled without NTP, the reports still show NTP on

    Posted Feb 02, 2011 08:38 AM

    Has the client checked into the SEPM since the install was done?



  • 4.  RE: SEP agent reinstalled without NTP, the reports still show NTP on

    Posted Feb 02, 2011 09:13 AM

    Yes, sure.



  • 5.  RE: SEP agent reinstalled without NTP, the reports still show NTP on

    Posted Feb 02, 2011 09:16 AM

    Yes, this issue is several weeks old now.



  • 6.  RE: SEP agent reinstalled without NTP, the reports still show NTP on

    Posted Feb 02, 2011 09:17 AM

    Ok. Which reports are you looking? Could  you post it here...?



  • 7.  RE: SEP agent reinstalled without NTP, the reports still show NTP on

    Posted Feb 02, 2011 02:14 PM
      |   view attached

    This is an excerpt from the computer status log.

    Attachment(s)

    txt
    Comp_status_NTP.txt   1 KB 1 version


  • 8.  RE: SEP agent reinstalled without NTP, the reports still show NTP on

    Posted Feb 02, 2011 02:19 PM

    hmm...ya that's intresting.....Try to upgrade and see...otherwise  need to open ticket  with support



  • 9.  RE: SEP agent reinstalled without NTP, the reports still show NTP on

    Posted Feb 02, 2011 09:24 PM

    If you find that client in Sep manager please delete it first from Sep manager console

    and then allow that client to connect to Sepm again or replace sylink on the machine to get the communication .

     



  • 10.  RE: SEP agent reinstalled without NTP, the reports still show NTP on
    Best Answer

    Posted Feb 02, 2011 09:28 PM

    Also let me know if you see following registry entries on that client machine

    Go to regedit take reg back up and go to

    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\smc_engine_status 

    If the value of  smc_engine_status  is "0" that means NTP is Disabled

    If the value of  smc_engine_status  is "1" that means NTP is Enabled

    Please check

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Teefer2

    If you find teefer2 remove it and reboot the machine

     

    Note making changes to smc engine status ntp enable or disable needs an reboot .

    Note:-Please take reg back up before making any changes to it