Endpoint Protection Small Business Edition

Hello,

I run a Windows Server2003 R2 machine here protected by Symantec Endpoint Protection 11.0. Today after a system restart, Windows failed to start any more (got a blue background with my mouse cursor that could be moved). I went to safe mode and there to event viewer. I found the following error:

"Event ID 7026

The following boot-start or system-start drivers filed to load:

eeCtrl

Fips

SPBBCDrv

SRTSP

SRTSPX"

As I saw that eeCtrl was related to Symantec, I went to msconfig.exe and disabled all the services that start with "Symantec". Guess what - Windows started like a charm. But now my protection is gone. I am afraid that if I tick those services back, system will not start again. What can I do in this case?

 Thank you in advance!

What version are you running? If you are on a n older version, I suggest uprading. There have been BSOD fixes in past builds. If that is not an option, you might consider opening a case with Symantec support. Be prepared to provide a full memory dump for analysis.

Best,

Thomas

I suppose, if you saw you mouse cursor, it was not BSOD, was it? If not, please try to uninstall SEP, reboot and install again. I know it sounds trivial but it is the simplease solution we can try at if works out, it's gonna be also the quickest one.

Hello,

indeed, it is NOT the BSOD, but yes, this is the first step to do after trying several other ideas. i will uninstall SEP and put it back again. Will see what will happen then. I will keep you informed.

Thanks!

Laurentiu,

I would suggest doing it this way:

- uninstall SEP and LiveUpdate from Control Panel,

- reboot,

- install again (do you have the newest RU6 MP2 version? It might be crucial!)

- check :-)

Good luck! Let us know!

I did the steps above yesterday, after the installation and definition updates, all was OK. But this morning I found the server stuck, remote access was impossible, connecting a monitor showed the screen saver in action, no input from USB mouse or keyboard. Could not enable/disable "Num Lock" for example ( the LED on the keyboard was not functional). So the only option was the riskiest one, stopping from the button. After turning back on, again, that blue background, with my mouse cursor being able to move. Power off by the button, go to safe mode, turn off services of Symantec, and Windows starts like a rocket. 

How can I upgrade tro RU6 MP2 version? Is that a free one if I already purchased SEP?

Thanks again!

You can upgrade to RU6MP2.It is absolutely free since you are already having a valid license.

You can download it from https://fileconnect.symantec.com by using product serial number.If your client is not RU6 or above it is better to uninstall the client and install RU6MP2 on it.Or you have to upgrade it to RU6a first then has to upgrade to RU6MP2....

Please repeat the procedure with RU6 MP2 this time. Please install AV/AS component only (no NTP or PTP) and check.

Keep us informed!

hello!

I installed RU6a, everything looks OK now when Windows Server 2003 starts. But I now have another issue that I'd like to solve. I have a share on the server wich is mapped on client PCs. I cannot acces it anymore, untill I disable SEP. Where do I define exceptions for sharing files into the LAN ?

You will need to modify your firewall rules to allow Filesharing

Default Firewall Rules

The Deny rules include blocking IPv6, IPv6 over IPv4, local file sharing, and Remote Administration
Logging rules include: Do not log broadcast and multicast traffic, block and log IP traffic, and block all other traffic.

http://www.symantec.com/business/support/index?page=content&id=TECH116730&actp=search&viewlocale=ja_JP&searchid=1292429882501