Video Screencast Help

What is ccSvcHst.exe, what does it do??

Created: 25 Jul 2012 | 6 comments

We have millions of instances of this upon our XenApp 6.0 servers.

Is it absolutely necessary to have this??

If not how do I get rid of it or have only ONE instance per XenApp server??

Thank you, Tom

Comments 6 CommentsJump to latest comment

pete_4u2002's picture

 

The RTVScan.exe functionality is now provided by the SepMasterService service. The image name for this service is now ccSvcHst.exe. Note that there are multiple ccSvcHst.exe instances running on your computer. The SepMasterService service requires one instance, and an additional instance is required for each user session.

also check this link

Best Practices for Symantec Endpoint Protection on Citrix and Terminal Servers

http://www.symantec.com/business/support/index?page=content&id=TECH91070

TomMLS's picture

On my computer per se I see only one instance of ccSvcHst.exe.

On our XenApp servers we have multiple instances, is this absolutely required??

The above-mentioned link does not work.

Thank you, Tom

Jackie007's picture

Hi Tom,

I have checked this link are working....

 

I have copy and paste...

 

Problem
 

You are looking for information on how to best configure Symantec Endpoint Protection (SEP) for Terminal Server and Citrix solutions

 

Solution
 

The following whitepaper provides information on the best configuration of SEP in Terminal Server and Citrix environments.

These recommendations apply to SEP 11 and with minor differences also to SEP 12.1.

In SEP 12.1 some processes have changed on the client:

  • ccApp.exe and Rtvscan.exe are no longer present. Their functionality has been moved into ccSvcHost.exe.

  • SmcGui.exe will only be running if the user launches the SEP GUI and it should only be launched for that user session.

  • The ccSvcHst.exe handles the system tray icon which is suppose to run in every session.

 

The start of these multiple instances can be prevented by modifying the registry value for LaunchSmcGui as described in the document.

Prevent the process from starting by changing the registry value:

  1. Click Start, Run and type “regedit” then click OK

  2. Browse to HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC

  3. Find the entry LaunchSmcGui and change it from DWORD 1 to DWORD 0

Note: When LaunchSmcGui is disabled, the help and support > troubleshooting window will show the server as offline. However the client will still update policies/content as needed. The Policy Serial Number can be verified by viewing the SerialNumber string in the registry editor (HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\Sylink).

 

AttachmentSize
SEP_Citrix-Terminal_Servers.pdf 494.95 KB

Thanks....

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you

pete_4u2002's picture

yes your system is not a terminal server hence you will see only one instance.

You can google for the " Best Practices for Symantec Endpoint Protection on Citrix and Terminal Servers" and check if that helps to redirect and open the page.

Anyways i have attached the pdf atatched within that link

 

AttachmentSize
SEP_Citrix-Terminal_Servers.pdf 494.95 KB
TomMLS's picture

Symantec never updated it for 12.x????????

Thank you, Tom

pete_4u2002's picture

its applicable for SEP 11 and SEP 12 :-)

from the link

In SEP 12.1 some processes have changed on the client:

  • ccApp.exe and Rtvscan.exe are no longer present. Their functionality has been moved into ccSvcHost.exe.

  • SmcGui.exe will only be running if the user launches the SEP GUI and it should only be launched for that user session.

  • The ccSvcHst.exe handles the system tray icon which is suppose to run in every session