Video Screencast Help
Search Video Help Close Back
to help

Windows Updates and SEP/SEPM problem

Created: 12 Dec 2012 | 10 comments
Orlin Kalenski's picture
0 0 Votes
Login to vote

I've a big problem - when I installed SEP and SEPM, v.12.1, all MS Updates stopped to work.

I've Windows Server 2012 Standard and Windows 7 as client computers. SEP and SEPM working normally. I didn’t make any changes to Symantec Firewall Polices. When I try to update server, occurs Error Code 80240437.  When I try to update Win7, occurs Error Code 80246001.

Please help me ASAP !

Comments 10 CommentsJump to latest comment

Rafeeq's picture

when you installed SEPM it would have asked if you want to install on custom website or defaut website, check if that removed your WSUS in IIS.

You might have installed network threat protection component of SEP. if Yes, then go to add/remove programs, select SEP select modify uninstall NTP and check. That should fix it.

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

0
Login to vote
Brian81's picture

You can either remove the NTP component or simple disable by right clicking the SEP icon in the task tray and checking the result

0
Login to vote
Rafeeq's picture

 

Symantec Endpoint Protection clients can no longer communicate with Symantec Endpoint Protection Manager after Symantec Endpoint Protection Manager was upgraded from SEP 11 to SEP 12.1

http://www.symantec.com/business/support/index?page=content&id=TECH156871

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

0
Login to vote
Ambesh_444's picture

Hi,

Please uninstall NTP and check...

It will help you.

 

Thank& Regards,

Ambesh

Please mark your thread as 'SOLVED' with the answer that helps you.

0
Login to vote
Mithun Sanghavi's picture

Hello,

How are you updating the Windows Updates? Is that by running the Windows Update from Control Panel OR via WSUS?

I wonder if you have Symantec Endpoint Protection 12.1 RU2 (12.1.2015) installed on Windows Server 2012.

I checked my Windows 2012 server and received no Errors. I have installed SEP 12.1.2015 (full feature set) on Windows 2012.

In case you carrying SEPM and WSUS, you still should not have any issues since 12.1 no longer users IIS.

The main problem in the past was having both the SEPM and WSUS being hosted on the default website...if configured this way there can be issues.

There is no inherent incompatability.  I do, however, recommend monitoring for performance. 

Both SEPM and WSUS will be competing for the same resources (network ports, bandwidth, CPU cycles, hard drive space) while keeping your environment up-to-date.  If you have a very large environment and there are any signs that WSUS or SEPM is struggling to keep up with its job, it would be a good idea to move each to a dedicated server.  The best admins take stability and security very seriously, and ensure that the tools which look after that (SEPM and WSUS) have plenty of resources to do their job right.

Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3

Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a

0
Login to vote
Orlin Kalenski's picture

Yes, I’ve SEP 12.1 RU2 (12.1.2015). I installed WSUS before and all was working normally with updates, but when I installed SEP and I saw the problem with updates, I removed role WSUS and I removed all WSUS components and folders. But I still have the problem. My network is very small, 10 computers only, with HP DL380-G8 server with 24GB RAM. I’m very concerned, because in Monday we will have ISO 27001 audit and updates must working.

0
Login to vote
Orlin Kalenski's picture

Hi, thanks a lot about advice, I’ve uninstalled NTP, but still have the problem.  In the client machines now Err Code is 80072F8F. I’ve try to fix this code with Microsoft fix, but it didn’t help me. On the server I’ve uninstalled NTP too, I’ve disabled Windows Firewall, but the problem is the same – when I tried to update - Err Code 80240437. I’ve not upgrade SEP to SEP12, it is fully new server 2012 and I’ve installed SEP 12.1 as new product. Before I've installing SEP updates worked normally.

0
Login to vote
Rafeeq's picture

disable all the symantec services.your wsus in on default site or custom?

it does download all the updates and does not push?

does that download successfully from internet.

 

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

0
Login to vote
Mithun Sanghavi's picture

Hello,

Could you try Disabling the Tamper Protection from the SEPM and check if that helps.

Secondly, I was checking the MS site and found this:

http://answers.microsoft.com/en-us/windows/forum/windows_8-windows_update/cant-use-my-windows-update-error-code-80240437/dda84a53-4840-4acb-96b2-493847aba241

Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3

Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a

0
Login to vote
Orlin Kalenski's picture

Yes, firstly I tried to disable Tamper Protection, but it doesn’t help me. Then I’ve uninstalled NTP from Programs and Futures/Change, but still have the problem.

I think that everything happened when I’ve installed SEPM and SEP, but after installation WSUS, because before installation SEPM, WSUS worked correctly.

Now I uninstalled and removed WSUS, but the problem doesn’t solve.

0
Login to vote