Symantec Management Platform (Notification Server)

I've been running SMP 7.1 SP2 MP1.1 for quite awhile now with no problems but this month I noticed that the accessibility of my Symantec Management Console is going down/up throughout the day; whether it be remotely or on the server itself.  Can't say exactly when it started although thinking it might've began after this month's Microsoft updates.  Also, while my SMC is inaccessible where IE just says "Connecting..." with no error message, I can get to http://{My_Altiris_Server_Name} which shows the IIS7 default webpage.  Actually, instead of refreshing my browser, one time I did let it sit for awhile where eventually that "Symantec Management Server Error" page came up.

This sure sounds like an IIS problem where I'd appreciate any tips you guys can give me on troubleshooting this intermitent issue.  Oh...not sure if this is related but I've also noticed that the "Shell Hardware Detection" and "Software Protection" services seem to be automatically bouncing throughout the day.  Is anyone else still running 7.1 like myself experiencing this problem as well?

First place to look would be the NS log, then IIS logs then HTTPErr logs. Then the Event viewer logs, first System and Application then all the new Microsoft > Windows ones.

Correct! Probably there is a problem with SQL Server connection or Domain controller.

Thought it was a SQL problem as the following errors show up periodically in the SQL logs but these existed far before I noticed this SMC connectivity issue so not sure.

 

Date  12/29/2014 6:19:02 AM
Log  SQL Server (Current - 12/29/2014 6:19:00 AM)

Source  Logon

Message
Error: 18456, Severity: 14, State: 11.

 

Date  12/29/2014 6:19:02 AM
Log  SQL Server (Current - 12/29/2014 6:19:00 AM)

Source  Logon

Message
Login failed for user 'DOMAIN\SERVER$'. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors. [CLIENT: xxx.xx.xx.x]

Here are some links about this Event ID 18456 of SQL (probably you've already checked such information)

• http://www.sqlteam.com/forums/topic.asp?TOPIC_ID=186313
• http://blogs.technet.com/b/the_9z_by_chris_davis/archive/2014/02/21/sql-event-id-18456-login-failed-for-user-reason-token-based-server-access-validation-failed.aspx

Did you try to?:

1. add a new Domain user or local Windows account as account of "Symantec Administrators" role and use it to see whether you will have same issue?
2. Re-add existing account in "Symantec Administrators" role (of course before do that, please remain additional account in "Symantec Administrators" role)
3. Is there any network issues, such as long delay, etc?
4. Were there any changes for GPO in Active Directory for these domain accounts?

Hello everyone,

I'm having the same problem. 

FYI, I restarted the SMP server, and worked OK for a while. Then, the problem happened again.

Has anybody found a solution yet? Let me know, please.

 

Thanks and Happy Holidays.

To determine step, when this problem has started to produce:

• It has started appear, after SMP rollup update installation?
• Or after some Windows update(s) installation?

I think that date of these actions are available and you can start to investigate from date, when SMP rollup or windows update was installed on your environment.

Anyone running SMP 7.5 seeing this issue?  Just curious.