Endpoint Protection

Hi all. i have one DC on a client. that runs Windows 2012, on an VMWARE ESXI 5.1 enviroment, and on it we have 2 issues. Client version is 12.1.4

One is that when installing the Client 12.1.4 the installation fails reporting event ID 1033 and 11708. Sometimes using the WipeClean tool they are able to install it, but then presents that Sep takes high cpu proces with no scan on that time and no event, client stop process takes over 3 days. and if we remove it it fails also. 

Do you have seem somthing like this?

regards.

What components are installed? Have you tried with AV only?

Also, have you tried with the latest, 12.1.5?

Can you post the SEPM_INST.log file for the failed install?

Supported systems on 12.1.5:

Operating system

• Windows XP (32-bit, SP2 or later; 64-bit, all SPs; all editions except Home)
• Windows 7 (32-bit, 64-bit, RTM and SP1; all editions except Home)
• Windows 8 (32-bit, 64-bit)
• Windows 8.1 (32-bit, 64-bit)
• Windows 8.1 update for April 2014 (32-bit, 64-bit)
• Windows 8.1 update for August 2014 (32-bit, 64-bit)
• Windows Server 2003 (32-bit, 64-bit, R2, SP1 or later)
• Windows Server 2008 (32-bit, 64-bit, R2, RTM, SP1, and SP2)
• Windows Server 2012
• Windows Server 2012 R2
• Windows Server 2012 R2 update for April 2014
• Windows Server 2012 R2 update for August 2014
• Windows Small Business Server 2003 (32-bit)
• Windows Small Business Server 2008 (64-bit)
• Windows Small Business Server 2011 (64-bit)
• Windows Essential Business Server 2008 (64-bit)

Hi is Windows 2012, only AV component. havent yet with 12.1.5 due console didnt show yet.

Now also there 2 more servers with client installed and no issue that are also Windows 2012.

Sadly can post logs due is an agency that works with goverment.

regards

the Symantec Endpoint Management server is running on Windows 2012, also it has client installed on it.

What's the exact process causing high utilisation? Is it constant or or during definition updates?

ist it constant, the process name is smc.exe and smcgui, as per the client this hig consume is only when symantec is instaled..

What happens if you go to Start >> Run and type smc -stop

Hi whether is  trough command line, or on services.msc the process takes on stopping for about 3 days.

sorry i mean that stays on "stopping" state, and if try to start stays on "starting". for more than 3 days

Something is not correct then. I would suggest a support case so they can perform advanced analysis on this.

one thing to add is that they have the vmware profile in balanced mode.

Possible to do a reboot an try? since this is a DC i doubt if you did reboot after running clean wipe and installed SEP.

Server was booted after removal with cleanup tool and whithout the tool, and after installing it. mi guess is that issue is more on virtual side

do you know if that can be causing the hig cpu?

It stops after removal though right?

the SEP yes.

and the performance issue yes it stops after removal.

I would upgrade to 12.1.5 first. If that doesn't help, may need to call support so they can remotely access and see what's going on.

Brian, you mean upgre the client side or the SEP Manager server?

Regards

Ideally both. But you can upgrade the client with upgrading the manager.

Thanks Brian, pardon mi ignorance but how can i get that client version?

Access https://symantec.flexnetoperations.com using your serial and you can download only the client

Thanks. i will ask them to try this and let you know.