SEP client not coming up as managed and Smc.exe at 50% CPU usage
Updated: 21 May 2010 | 19 comments
This issue has been solved. See solution.
I've put my install log here:
http://www.2shared.com/file/8873102/bb0d8bc8/SEP_I...
I cannot get the client to come up as managed and also Smc.exe is at 50% CPU usage when system idle.
I've tried a bunch of fixes that have worked in the past but cannot get this one to go.
Any thoughts on the issue from what's in the log?
discussion Filed Under:
Comments
regarding the Smc.exe... are
regarding the Smc.exe... are all the PCs that are not converted to manage all have 50% CPU usage?
We might get a trend here..
thanks..
Nel Ramos
version
which version are you using? And what is computer CPU and Ram?
Thanks
Fatih
Everything works better when everything works together.
I found a link that had the
I found a link that had the same issue Smc.exe at 50%... even when idle...
Nel Ramos
This might
This might help...
https://www-secure.symantec.com/connect/forums/smcexe-taking-50-cpu-when-idle
Nel Ramos
SMC might be taking the CPU
SMC might be taking the CPU up when it is reading the logs.
A quick resolve was taken by doing this based from the link above...
Click Start, Run then
smc -stop (enter)
delete all the log files in the folder
Click Start, Run then
smc -start (enter)
but the client was having this issue with an older version of SEP...
Thanks...
Nel Ramos
On version11.0.4202.75 2.39
On version11.0.4202.75
2.39 Ghz with 2Gb of RAM
Yes all 3 of my PCs that will not come up as managed currently have the Smc at 50% and they are idle
I tried deleting the logs but that did not work. Interestingly enough, I'm remoted in and once I started smc again, I lost connection but able to reconnect and Smc was 50% CPU usage again
Endpoint Knowledge Base
Security Best Practices
Hi bpohlman.. Had you tried
Hi bpohlman..
Had you tried the link above?
thanks...
Nel Ramos
Yes, I did but it was
Yes, I did but it was unsuccessful.
Endpoint Knowledge Base
Security Best Practices
If I upgrade the client to
If I upgrade the client to 11.0.5 does SEPM need to be upgraded as well?
Endpoint Knowledge Base
Security Best Practices
Can anyone tell me what
Can anyone tell me what Smc.exe does or point me in the right direction to do some research on it?
Endpoint Knowledge Base
Security Best Practices
Hi
if you find any files here. try deleting it and check if CPU goes down
when it runs the scan, it will scan the quarantine and will take high cpu
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine folder
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
I did not have a quarantine
I did not have a quarantine folder so I was unable to delete anything.
Endpoint Knowledge Base
Security Best Practices
Hi
Seems like it was a bug and fixed in MU5
from your post I see that the client was failed to communicate with the manager ( you have mentioned that you cannot get the client to communciate)
SMC.exe uses entire CPU core and client/manager communication fails after migrating or installing the Symantec Endpoint Protection client
Fix ID: 174134
Symptom: After upgrading a Symantec Endpoint Protection client, communication with the Symantec Endpoint Protection Manager fails because the default gateway is not in the same subnet.
Solution: Enhanced the process to find the best route to the server after the gateway IP address changes.
Please check this release notes and upgrade to MU5 to get the issue resolved
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007121216360648
I would suggest you to upgrade your clients to MU5, however your SEPM does not have to be upgrade to MU5, here is the discussion for your reference
https://www-secure.symantec.com/connect/forums/can-sepm-mr4-mp2-server-manage-sep-ru5-client
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
Upgrading now. Will let you
Upgrading now. Will let you know. Thanks.
Endpoint Knowledge Base
Security Best Practices
All 3 were upgraded to MU5
All 3 were upgraded to MU5 and connected successfully to SEPM. However, since I installed as unmanged and used sylink drop to make managed, the 3 PCs are showing up in the wrong group, even though I exported the sylink from the correct group. Any ideas?
Thank you for the help so far!
Endpoint Knowledge Base
Security Best Practices
Hi
I think its because of previous left out registy they are showing up in wrong group.
you may right client on the client and select the option move and move them to correct group
Please check the CPU utiliztion and let me know if the issue is fixed.
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
Yes, I forgot to mention that
Yes, I forgot to mention that the Smc CPU utilization is at 0 while idle. Thank you!
I do not have the option to move the clients by right clicking and selecting "Move", is there another way?
Endpoint Knowledge Base
Security Best Practices
Hi
good to hear that.:)
Have you imported the clients from active directory?
if its from AD right click on the group and select sync.
you should have the option to move the clients.
Open Symantec endpoint protection manager
click on clients tab
select the group
on the right hand side locate the client
right click the client and select the option move
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
Perfect. Thanks again for all
Perfect. Thanks again for all your help.
Endpoint Knowledge Base
Security Best Practices
Would you like to reply?
Login or Register to post your comment.