SEP client not coming up as managed and Smc.exe at 50% CPU usage

This issue has been solved. See solution.
bpohlman's picture

I've put my install log here:

http://www.2shared.com/file/8873102/bb0d8bc8/SEP_I...

I cannot get the client to come up as managed and also Smc.exe is at 50% CPU usage when system idle.

I've tried a bunch of fixes that have worked in the past but cannot get this one to go.

Any thoughts on the issue from what's in the log?

Nel Ramos's picture

regarding the Smc.exe... are

regarding the Smc.exe... are all the PCs that are not converted to manage all have 50% CPU usage?
We might get a trend here..
thanks..

Nel Ramos

Fatih Teke's picture

version

which version are you using? And what is computer CPU and Ram?
Thanks
Fatih

------------------------------------------
Everything works better when everything works together.

Nel Ramos's picture

I found a link that had the

I found a link that had the same issue Smc.exe at 50%... even when idle...

Nel Ramos

Nel Ramos's picture

SMC might be taking the CPU

SMC might be taking the CPU up when it is reading the logs.
A quick resolve was taken by doing this based from the link above...

Click Start, Run then
smc -stop (enter)
delete all the log files in the folder
Click Start, Run then
smc -start (enter)

but the client was having this issue with an older version of SEP...
Thanks...

 

Nel Ramos

bpohlman's picture

On version11.0.4202.75 2.39

On version11.0.4202.75

2.39 Ghz with 2Gb of RAM

Yes all 3 of my PCs that will not come up as managed currently have the Smc at 50% and they are idle

I tried deleting the logs but that did not work. Interestingly enough, I'm remoted in and once I started smc again, I lost connection but able to reconnect and Smc was 50% CPU usage again

Nel Ramos's picture

Hi bpohlman.. Had you tried

Hi bpohlman..
Had you tried the link above?
thanks...

Nel Ramos

bpohlman's picture

Yes, I did but it was

Yes, I did but it was unsuccessful.

bpohlman's picture

If I upgrade the client to

If I upgrade the client to 11.0.5 does SEPM need to be upgraded as well?

bpohlman's picture

Can anyone tell me what

Can anyone tell me what Smc.exe does or point me in the right direction to do some research on it?

Rafeeq's picture

Hi

if you find any files here. try deleting it and check if CPU goes down
when it runs the scan, it will scan the quarantine and will take high cpu

C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine folder

Rafeeq

bpohlman's picture

I did not have a quarantine

I did not have a quarantine folder so I was unable to delete anything.

Rafeeq's picture

Hi

Solution

Seems like it was a bug and fixed in MU5
from your post I see that the client was failed to communicate with the manager ( you have mentioned that you cannot get the client to communciate)

SMC.exe uses entire CPU core and client/manager communication fails after migrating or installing the Symantec Endpoint Protection client
Fix ID:
174134
Symptom: After upgrading a Symantec Endpoint Protection client, communication with the Symantec Endpoint Protection Manager fails because the default gateway is not in the same subnet.
Solution: Enhanced the process to find the best route to the server after the gateway IP address changes.

Please check this release notes and upgrade to MU5 to get the issue resolved

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007121216360648

I would suggest you to upgrade your clients to MU5, however your SEPM does not have to be upgrade to MU5, here is the discussion for your reference

https://www-secure.symantec.com/connect/forums/can-sepm-mr4-mp2-server-manage-sep-ru5-client

Rafeeq

bpohlman's picture

Upgrading now. Will let you

Upgrading now. Will let you know. Thanks.

bpohlman's picture

All 3 were upgraded to MU5

All 3 were upgraded to MU5 and connected successfully to SEPM. However, since I installed as unmanged and used sylink drop to make managed, the 3 PCs are showing up in the wrong group, even though I exported the sylink from the correct group. Any ideas?

Thank you for the help so far!

Rafeeq's picture

Hi

I think its because of previous left out registy they are showing up in wrong group.
you may right client on the client and select the option move and move them to correct group
Please check the CPU utiliztion and let me know if the issue is fixed.
 

Rafeeq

bpohlman's picture

Yes, I forgot to mention that

Yes, I forgot to mention that the Smc CPU utilization is at 0 while idle. Thank you!

I do not have the option to move the clients by right clicking and selecting "Move", is there another way?

Rafeeq's picture

Hi

good to hear that.:)

Have you imported the clients from active directory?
if its from AD right click on the group and select sync.

you should have the option to move the clients.

Open Symantec endpoint protection manager
click on clients tab
select the group
on the right hand side locate the client
right click the client and select the option move

Rafeeq

bpohlman's picture

Perfect. Thanks again for all

Perfect. Thanks again for all your help.