Video Screencast Help
Symantec Appoints Michael A. Brown CEO. Learn more.

Kixtart scripts run slowly

Created: 31 Jan 2012 | 4 comments
masdtaylor's picture
0 Agree
0 Disagree
0 0 Votes
Login to vote

We use kixtart scripts for our login scripts.  When symantec endpoint protection 12.1 RU1 is installed those scripts take more than 10 times longer to run.  I had a case open with symantecs help (#416141574).  They were unable to help me and suggested I enter an enhancement request.  One of the troubleshooting steps I took is to uninstall one component at a time from SEP and test the login script with each uninstallation.  The login script didn't get to a normal speed until I removed the antivirus portion.

I tried adding exceptions to the process, folder, and files used, but no go...

Hope this helps you to help me :)

 

Taylor Hammerling

MASD network tech, level II

Comments 4 CommentsJump to latest comment

TNicikowski's picture

Hello,

I have the same issue with one of my clients. Have you been able to resolve this?

If so, can you share the fix/work-around?

Thanks,

 

 

Tedd Nicikowski

Security Consultant, STS (SEP, DLP)

0
Login to vote
dabski's picture

Same Issue here too !

Does anyone have a fix for this yet?

Our login script is removing and recreating the "%Userprofile%\Start Menu" & "%Userprofile%\Desktop" from a template folder so everyone gets the correct shortcuts on the start menu & desktop.

Since going to SEP 12.1 (From SAV) our login script processing time has increased dramatically, all due to the slow processing of the start menu and desktop recreation.

No matter what SEP settings I enable or disable, or exceptions I apply, nothing helps resolve the slow processing of the login script. The only thing that resolves the slow processing is to uninstall the SEP client from the servers in question.

Would be grateful if anyone could post any solution they may have found.

Thanks.

 

dabski

0
Login to vote
dabski's picture

We've now managed to resolve this issue (via a support call)

Solution is to Disable the BASH feature that is new to SEP12.1

SC config BHDrvx86 start= disabled     : For 32 bit Operating Systems

or

SC config BHDrvx64 start= disabled     : For 64 bit Operating Systems

 

It sounds like Symantec are aware of this issue and will be looking to resolve it in future versions of SEP, but for the time being the answer is to disable BASH.

 

Dabski

 

+1
Login to vote
CivilServant's picture

The symbol in the icon tray shows no green dot anymore. How do you want me to tell the users?

0
Login to vote