Endpoint Protection

I have run into a situation with SEP 11, where I would like to cancel all scans running on servers before the day starts.

Full system scans run on servers every night, after virus definitions are updated. The scans typically last between 1 and 4 hours. This depends on the server, but they all finish before the work day begins. Occasionally, something happens that causes the scan to continue into the business day. This results in poor system performance during work hours.

Does anyone know if there is a way to configure a policy to cancel all scans at a scheduled time? I would like to do this through SEPM and apply it to the appropriate groups. By doing this, I could insure scans are not continuing into work hours and negatively impacting performance. If this can’t be done with a policy or SEPM configuration, could it possibly be done with a command running as a scheduled task?

I know this can be done manually, but I would like to be proactive when it comes to system performance.

You posted in the wrong forum, I will move this over to Endpoint Protection for you.

Check this KB about Running commands on clients from the console

http://www.symantec.com/business/support/index?page=content&id=HOWTO26995

Best,

Thomas

You can't cancel a scan from the SEPM, but what you could do is configure the amount of time a scan would run for.  The doc www.symantec.com/docs/TECH134279 explains how to set this up in conjuction with setting up randomization which you may or may not want to do.

If you click on the "Help" button on the "Edit Schedule Scan" window it should give you more information about exactly what each option does.

taskkill /f /im /s (system name) "rtvscan.exe" wil kill all the existing scans.