Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Windows Updates and SEP/SEPM problem

Created: 12 Dec 2012 | 10 comments

I've a big problem - when I installed SEP and SEPM, v.12.1, all MS Updates stopped to work.

I've Windows Server 2012 Standard and Windows 7 as client computers. SEP and SEPM working normally. I didn’t make any changes to Symantec Firewall Polices. When I try to update server, occurs Error Code 80240437.  When I try to update Win7, occurs Error Code 80246001.

Please help me ASAP !

Comments 10 CommentsJump to latest comment

Rafeeq's picture

when you installed SEPM it would have asked if you want to install on custom website or defaut website, check if that removed your WSUS in IIS.

You might have installed network threat protection component of SEP. if Yes, then go to add/remove programs, select SEP select modify uninstall NTP and check. That should fix it.

.Brian's picture

You can either remove the NTP component or simple disable by right clicking the SEP icon in the task tray and checking the result

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Rafeeq's picture

 

Symantec Endpoint Protection clients can no longer communicate with Symantec Endpoint Protection Manager after Symantec Endpoint Protection Manager was upgraded from SEP 11 to SEP 12.1

http://www.symantec.com/business/support/index?page=content&id=TECH156871
Ambesh_444's picture

Hi,

Please uninstall NTP and check...

It will help you.

 

Thank& Regards,

Ambesh

"Your satisfaction is very important to us. If you find above information helpful or it has resolved your issue. Please don't forget to mark the thread as solved."

Mithun Sanghavi's picture

Hello,

How are you updating the Windows Updates? Is that by running the Windows Update from Control Panel OR via WSUS?

I wonder if you have Symantec Endpoint Protection 12.1 RU2 (12.1.2015) installed on Windows Server 2012.

I checked my Windows 2012 server and received no Errors. I have installed SEP 12.1.2015 (full feature set) on Windows 2012.

In case you carrying SEPM and WSUS, you still should not have any issues since 12.1 no longer users IIS.

The main problem in the past was having both the SEPM and WSUS being hosted on the default website...if configured this way there can be issues.

There is no inherent incompatability.  I do, however, recommend monitoring for performance. 

Both SEPM and WSUS will be competing for the same resources (network ports, bandwidth, CPU cycles, hard drive space) while keeping your environment up-to-date.  If you have a very large environment and there are any signs that WSUS or SEPM is struggling to keep up with its job, it would be a good idea to move each to a dedicated server.  The best admins take stability and security very seriously, and ensure that the tools which look after that (SEPM and WSUS) have plenty of resources to do their job right.

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Orlin Kalenski's picture

Yes, I’ve SEP 12.1 RU2 (12.1.2015). I installed WSUS before and all was working normally with updates, but when I installed SEP and I saw the problem with updates, I removed role WSUS and I removed all WSUS components and folders. But I still have the problem. My network is very small, 10 computers only, with HP DL380-G8 server with 24GB RAM. I’m very concerned, because in Monday we will have ISO 27001 audit and updates must working.

Orlin Kalenski's picture

Hi, thanks a lot about advice, I’ve uninstalled NTP, but still have the problem.  In the client machines now Err Code is 80072F8F. I’ve try to fix this code with Microsoft fix, but it didn’t help me. On the server I’ve uninstalled NTP too, I’ve disabled Windows Firewall, but the problem is the same – when I tried to update - Err Code 80240437. I’ve not upgrade SEP to SEP12, it is fully new server 2012 and I’ve installed SEP 12.1 as new product. Before I've installing SEP updates worked normally.

Rafeeq's picture

disable all the symantec services.your wsus in on default site or custom?

it does download all the updates and does not push?

does that download successfully from internet.

 

Mithun Sanghavi's picture

Hello,

Could you try Disabling the Tamper Protection from the SEPM and check if that helps.

Secondly, I was checking the MS site and found this:

http://answers.microsoft.com/en-us/windows/forum/windows_8-windows_update/cant-use-my-windows-update-error-code-80240437/dda84a53-4840-4acb-96b2-493847aba241

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Orlin Kalenski's picture

Yes, firstly I tried to disable Tamper Protection, but it doesn’t help me. Then I’ve uninstalled NTP from Programs and Futures/Change, but still have the problem.

I think that everything happened when I’ve installed SEPM and SEP, but after installation WSUS, because before installation SEPM, WSUS worked correctly.

Now I uninstalled and removed WSUS, but the problem doesn’t solve.