Endpoint Protection

Hi All,

We are running windows 8.1 and SEP 12.1 for our client and everytime we restart the system SEP turns off.

We need to manually turn on the AV or else it will stay off. Users Don't have admin rights so we need to go and turn it on by giving admin credentials.

We have to do this everyday for the AV to be running.

Is there any way to fix this issue Permanantely ?

When you go into services.msc is highlight symantec endpoint protection properties is the service set to start automatically or is i set to manual? 

When the client was installed was it intially installed using admin credentials? 

When we go to Services.msc the service is set to Start Automatically.

Yes the Client was installed using Admin credentials.

Ok interesting.

On the SEPM when you go to the clients and groups that the machine is in > Policies > General settings > Tamper Protection is protect symantec security software from being tampered with or shut down checked? also try setting actions to block and log in case there is another services stopping the SEP service. 

Or is this a self managed client? 

We have SEPM i will check this option and let you know

What is the exact 12.1 version?

Please run the symhelp tool on the system to do error checking.

The Exact Version is 12.1.4100.4126.1

I have troubleshooted the issue and found that the Services are rinning fine and SEP is also working fine.

The root problem is that UAC says that SEP is Off and due to which the client VPN does not connect as AV is saying Off.

I have turned Off the UAC from the Admin Account but when user logs into his account it turns on again and it says SEP is off.

Is there anyother way to turn off the UAC from saying AV is Off

The Exact Version is 12.1.4100.4126.1

I have troubleshooted the issue and found that the Services are rinning fine and SEP is also working fine.

The root problem is that UAC says that SEP is Off and due to which the client VPN does not connect as AV is saying Off.

Can you please help me troubleshoot why UAC is telling AV is off ? and how to fix this isssue

First you're on an old version so this may be a known issue.

Second, it could be an issue with UAC.

Have you opened a support case to confirm? They may want advanced logs to take a look.

I am going to log a ticket with Symantec to troubleshoot the issue. Just waiting for my team to share the 12 digit Customer ID so that i can contact them.

Will update once the issue is fixed.