Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Symantec Endpoint Protection Blocking Remote Desktop

Updated: 21 May 2010 | 5 comments
johansubash's picture
0 0 Votes
Login to vote

Hi

I am using SEP 11, which is installed as client server basis. SEP protection server is my Domain server and i push to my client and other servers from my Domain server, after that i am not able to connect my Data server through Remote Desktop, getting the error message "RPC server is unavailable"  if i disable SEP in my Domain server i can log to my Data server remotely. Other servers i can log in Remotely without diabling SEP only 1 server i am facing this problem, can any one help me to sort out this issue.

Subash

Comments

Ivan Tang's picture
12
Aug
2009
0 Votes 0
Login to vote

Hi Subash Make sure your

Hi Subash

Make sure your setting of allow remote desk top is there, nobody change it.
then Try telnet server port 3389 and see if there are any problem happen through the network, if problem happen, try to see is there any logs in Network threat protection, as your comments, if you disable SEP ,then remote desk top works, then check if our Network threat protection got any log about this connection.
if you can not find any logs in NTP log, then try to add an firewall policy to allow TCP 3389.

only my personal suggestion, wish this can help.

Ivan

sandip_sali's picture
12
Aug
2009
0 Votes 0
Login to vote

Symantec Endpoint Protection Blocking Remote Desktop

Hi,

        Please let us know the following :-

  • SEPM version installed on this DC
  • SEP Version installed on this DC
  • Symantec Endpoint features installed on this DC
  • Do you have any other Firewall which is enabled

Thanks & Regards Sandip C Sali

johansubash's picture
12
Aug
2009
0 Votes 0
Login to vote

SEP  version 11 don't have

SEP  version 11
don't have any firewall installed in this network, the issue is with SEP only, because when i disabled SEP in my domain server(which is the SEP server) i can log to my data server remotely.

Prachand's picture
12
Aug
2009
0 Votes 0
Login to vote

SEP  Clients has 3 componets

SEP  Clients has 3 componets

Anti Virus and Anti spyware
Network Threrat Protection
Procative Threat Protection

Out of these 3 which are installed on the Domain Controller

Network Threrat Protection is the firewall componet from SEP

If NTP is installled.  We can do 2 things

1. Uninstall NTP from Add remove Program/ Modify    And Cross NTP
2. Modify the   firewall rule to allow "Block Remote Administration"

enabling the rule will allow Remote Desktop connections onto the computer.

Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)

Rafeeq's picture
12
Aug
2009
0 Votes 0
Login to vote

Seems like symantec firewall is blocking

when the symantec services is enabled its blocking your RDP.
If you dont have network threat protection installed, you may try this. from Microsoft

How to configure RPC dynamic port allocation to work with firewalls

http://support.microsoft.com/kb/154596

you may try this.

go to start - run - ncpa.cpl
right click on local area connection and click on properties.
if you find anything like teefer2 , just uninstall it ..
try to rdp again, it should be fine.

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq