Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

SEP asking for reboot

Created: 28 Apr 2010 | 15 comments
crush2090's picture
0 0 Votes
Login to vote

Hey all.

Bit of an issue.

I had a server 2003 system get a request from SEP to reboot the other day for something that I have not been able to trace down.

It shows in the system event log, three entries

MSI Installer running for SEP
Installation finished
Requesting a reboot

Not sure why this happened and here is the reasons why.

The Server is in it's own container seperate from all the others.
Nothing was installed on the server nor was anything changed in the container.

None of the policies were changed as well, so this is a real brain scratcher

Any ideas as to where to look, have not been able to trace down the log files on the server yet, so if someone could point me to the right direction that would be great.

Thanks
Dan

Comments

Rafeeq's picture
28
Apr
2010
1 Vote +1
Login to vote

hi

was the reboot initiated from SEPM console?
did you install Network threat protection coz that will ask for reboot
open sepm
under the home tab
there is a option called reboot required; click on that ; check why its showing your machine.

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

blenahan's picture
28
Apr
2010
0 Votes 0
Login to vote

Good tip.  I did not know to

Good tip.  I did not know to click on Reboot Required to see the reason for the reboot on a particular machine

 

_________________________________________________________________

Please remember to mark the thread 'SOLVED' with the answer that most helped you by choosing 'Mark As Solution' on the applicable answer

blenahan's picture
28
Apr
2010
0 Votes 0
Login to vote

Int he SEPM go to Monitors >

Int he SEPM go to Monitors > Logs > System > Client-ServerActivity OR Client Activity.  Click Advanced and enter the server name in the Computer field.  Set the time frame to something long enough to cover when this event occurred and set the Limit to 1000 entries.  Hopefully this will shed some light on it for you.

 

_________________________________________________________________

Please remember to mark the thread 'SOLVED' with the answer that most helped you by choosing 'Mark As Solution' on the applicable answer

crush2090's picture
28
Apr
2010
0 Votes 0
Login to vote

Rafeeq: No, at the time there

Rafeeq:

No, at the time there was no one logged into the console besides myself and I was in another part of the tree at the time.
It was already installed, but it has been disabled.

Thanks
Dan

crush2090's picture
28
Apr
2010
0 Votes 0
Login to vote

Firewall requesting reboot?

Hey, another question for you, if the firewall componenet is installed but disabled and gets an update.

Does the firewall re-enable itself and apply the update, require reboot, to disable itself???

Thanks
Dan

Rafeeq's picture
28
Apr
2010
0 Votes 0
Login to vote

hi

if it was installed ; it will get an update from SEPM 
Needs a reboot; check the reboot required in the status summary ( in home tab)
you might find the reason..do you see any machines say reboot required ( whats the count u see there)

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

crush2090's picture
28
Apr
2010
0 Votes 0
Login to vote

Hey.  I actually see a bunch

Hey.  I actually see a bunch of system there needing reboot.  Not the one that needed it however, probably because it has already been rebooted, but ALL of them say it is because of Network threat Protection component has a product patch to apply.

Rafeeq's picture
28
Apr
2010
0 Votes 0
Login to vote

Hi

Thats the reason then...:)
As you have rebooted the entry is removed from the list. It was NTP patch which requested reboot.. :)
monitors-logs
system
client activity
click on advanced
put in your server name
create the log
check if NTP patch was updated.
you should find one
Let me know if you have any other questions..

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

crush2090's picture
28
Apr
2010
0 Votes 0
Login to vote

so the firewall no matter if

so the firewall no matter if it is disabled or not will get a patch and then require a reboot?

Rafeeq's picture
28
Apr
2010
0 Votes 0
Login to vote

Hi

The firewall component is installed but not enabled( disabled by you)
however the smc will do the job of getting definitions for all the components installed.

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

crush2090's picture
28
Apr
2010
0 Votes 0
Login to vote

So even tho it was disabled

So even tho it was disabled by me, it still will do a reboot after getting updates for a component that was disabled

Rafeeq's picture
28
Apr
2010
0 Votes 0
Login to vote

Hi

it wont reboot; it would say reboot is required.

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

crush2090's picture
28
Apr
2010
0 Votes 0
Login to vote

Okay, then if that is the

Okay, then if that is the case, why would the system stop responding during this request, when it happened the system was working fine, then did the update, then requested a reboot.  During this time, the program (remedy) stopped responding and the system became unstable.

would it be because the system was trying to activate the firewall to install component before reboot?

Thanks
Dan

sorry for so many questions: I am getting heat over this.

Vikram Kumar-SAV to SEP's picture
28
Apr
2010
0 Votes 0
Login to vote

It Looks Windows update and

It Looks Windows update and SEP install colided with each other..So 2 or more request cannot be postponed for system reboot.
SO call it a reboot fir windows update or SEP install..but you will have to reboot.

dca2r's picture
29
Jul
2010
0 Votes 0
Login to vote

Hi Vikram,

I had the same problem, but everything is fixed now. Thanks for the support.
I rebooted the client I was having the problems with (2008 server R2) and everything is fine now, but on the “Home” page the client still show “Restart Required” even though I rebooted the server a couple times. The reason is The “Network Threat Protection component has a product patch to apply” but the Network Threat Protection feature is not installed in this client. I removed and reinstalled the client and rebooted the server and the “restart required” status will not go away. How can I make this status go away?

Thanks

Ray