Endpoint Protection

Hi,

Prev versions of SEP 12.1.3xxx services status before upgrading to latest version

SepMasterService---Auto Started

SmcService--Manual Started

After upgradation to latest version why the symantec services are not set to Auto mode Automatically. ( I don't think it needs to take prev services conf )

I did manual install from package & also tried to push the latest version packages from SEPM also, still services will be in Manual mode.

Does you have enable Tamper protection ? Did you check after restart SEP client ?

This is unmanaged sep client or managed client ?

It always show manually. If you can set the tamper protection no one can stop and change it

Same status here.

Though its manual, you wont be able to change any option on its property its Grayed out and hardcoded.

Check the dependency service it will be with SEPMASTERSERVICE

Check SebastinZ ( Symantec employee's comment)

https://www-secure.symantec.com/connect/forums/important-services-started-and-set-manual-without-option-change

Symantec Management Clien always be as a manual status but that is grey out.

It can only be stop using smc -stop command with the respective password.

James--its Managed

Rafeeq--If Tamper protection is On, then none can finger it, I accept it, but still why services needs to be in Manual ( though dependency is there )

Fresh installation of SEP Client, makes services Auto by default, but during upgradation if service is Manual, then it never turns Auto untill & unless we disable the tamper & make necessary registry settings.

I have read Sebastin thread before starting this post.

During upgrade, by default services should go into Auto mode.

What happend when you reboot system after upgrading ?

After reboot

SepMasterService---Auto Started

SmcService--Manual Started  

Protection is available, but my concern is about Auto mode.

As far SMC is concerned, it is dependent on Symantec Endpoint Protection (SEPmaster service)hence it starts after the SEP service is started even it is set to manual.

https://www-secure.symantec.com/connect/forums/are-these-services-normal-and-where-get-more-info

Rafeeq--I agree it starts the services no doubt on this.

but why it will be in Auto mode for Fresh installation & Manual mode for upgrade ( if prev setting was Manual )

Atleast next release if this is taken care then it will be good.

With SEP 12.1, Symantec endpoint proection ( SEPMasterservice) ======Automatic

                        Symantec management client ( Smc)==============Manual

This should be true for fresh install as well, are you sure that smc is auto if you do new install and manual if you upgrade from previous version? say from 11.x? , this is something which I have not tested.. I need to check that to..

Rafeeq-- I again recheked, SMC is Manual after reinstalling on Fresh machine. ( seems earlier fresh machine test had previously installed versions of Symantec in some registry, im not sure on this  )

is there any specific reason for making this particular services manual mode ?

with 11.x , symantec endpoint protection executable was rtvscan.exe, but with 12.x its ccsvhst.exe, one of the major change and its dependency

This is the way it is on SEP 12.X , SEP 11.x is should be auto.. why they made it , it should be symantec internal info.. ;) 

Thanks for the Internal Info :-)