New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

View
Track

Paul Murgatroyd

Paul Murgatroyd

Symantec Employee

Accredited

Certified

Member for: 2 years 50 weeks
Contact: Send this user an email

Member for: 2 years 50 weeks

Blog: View recent blog entries

Symantec Accreditations

Symantec Technical Specialist (STS)

Symantec Endpoint Protection 11 MR4
Symantec Endpoint Protection 12.1

Symantec Certifications

Symantec Certified Specialist (SCS)

Administration of Symantec Endpoint Protection 12.1
Symantec Endpoint Protection 11.0 Administrator

Contribution Stats

195

Solutions

15

Forum Threads

2,738

Comments

1

Blog Entry

0

Ideas

5

Articles

0

Videos

0

Downloads

0

Events

9

Groups Joined

Paul Murgatroyd's Activity

Show:

discussion comment 06 Jan 2012

Paul Murgatroyd commented on: IE 8 Crashes After Installing Symantec Endpoint Protection SBE 12.1 RU1

Neil, do you have your case number?

discussion comment 20 Dec 2011

Paul Murgatroyd commented on: Is there a way to find which MGMT server a client reports to?

Also, Monitors, Logs, Computer Status then Export to CSV and there is a field (Server Name) which tells you the server name the client reported to for its last heartbeat cycle.

discussion comment 19 Dec 2011

Paul Murgatroyd commented on: Setup.exe return code

The single EXE setup file will always return 1. At the moment, the only way to get installation status would be to use the MSI package.

discussion comment 16 Dec 2011

Paul Murgatroyd commented on: Office 2010 installs Failing

No problem.. I'm trying to get a little more info for you, but the new engine was released in definitions dated 13th December. The SEP Troubleshooting, Versions UI should show the ERASER version as 7274498.65537. You can also ...

discussion comment 15 Dec 2011

Paul Murgatroyd commented on: Symantec Endpoint 12 not compatible with Virtual Desktops due to Licensing

If you click Admin, Domains in the SEPM, you will see a list of SEPM domains (these are not Windows domains) - you will probably have a single domain listed. What you could do is to create a new domain in here to host your VDI ...

discussion comment 14 Dec 2011

Paul Murgatroyd commented on: What is the difference between these definitions?

They are the same idea.. SESC = SEPC SESM = SEPM

discussion comment 14 Dec 2011

Paul Murgatroyd commented on: What is the difference between these definitions?

thats correct, SEPC content is for clients getting their content directly from LUA. SEPM content is for clients that get their content from SEPM.

discussion comment 13 Dec 2011

Paul Murgatroyd commented on: Office 2010 installs Failing

Hi Car_Bed, We believe we have traced this to a problem with our ERASER engine. An update should be released in the next day or so that will fix this. You don't need to do anything, the SEP client will pick this up automatically ...

discussion comment 09 Dec 2011

Paul Murgatroyd commented on: A bug of SEP RU1?(Download Insight)

I saw logs for Ramnit too, thats a virus. I would advise a full scan outside of Windows, using the Symantec Endpoint Recovery Tool, you can download it from FileConnect.

discussion comment 09 Dec 2011

Paul Murgatroyd commented on: A bug of SEP RU1?(Download Insight)

thanks, lots of interesting info in there. I note you have had several AV products on this machine.. there may be remnants of those left that are causing us problems. I also note that when SEP has worked, it has detected threats. I ...

discussion comment 09 Dec 2011

Paul Murgatroyd commented on: A bug of SEP RU1?(Download Insight)

I had engineering take a quick look at your logs, the install seems fine so something else must be breaking this somewhere. Could you run the SEP Support Tool on this machine and save the results? You can get to the tool from the Help ...

discussion comment 09 Dec 2011

Paul Murgatroyd commented on: A bug of SEP RU1?(Download Insight)

hmm, ok.. what response do you get from these commands in a command prompt window? sc query symiron sc query symds sc query bhdrvx64 sc query IDSVia64

discussion comment 09 Dec 2011

Paul Murgatroyd commented on: A bug of SEP RU1?(Download Insight)

ok thanks, do you have this folder on your system when SEP is installed? C:\Windows\system32\Drivers\SEP\0C0103E8\009D.105\x64 SEP should be putting its drivers in there, it is creating services correctly, but the installer then seems to have a ...

discussion comment 09 Dec 2011

Paul Murgatroyd commented on: A bug of SEP RU1?(Download Insight)

ok, so that part of the install worked fine, its the SIS piece we need (because thats what installs the drivers), it should be here: C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\Install\Logs I'm well aware of ...

discussion comment 09 Dec 2011

Paul Murgatroyd commented on: Policy Serial number and Policy date time stamp differ

As Swapnil said, the Policy Serial Number is always in GMT/UTC whereas the policy date is the local SEPM time (in this case CET). Both times match, just one is in CET and the other UTC

discussion comment 09 Dec 2011

Paul Murgatroyd commented on: A bug of SEP RU1?(Download Insight)

you are missing a lot of drivers there. Do you have your sep_inst.log file? It should be in %TEMP% There should also be a SIS_INST.LOG too You wont see SPBBC because thats old, you should see BHDrv towards the top of the list ...

discussion comment 08 Dec 2011

Paul Murgatroyd commented on: A bug of SEP RU1?(Download Insight)

thanks, and lastly can you post your SONAR system log? You can get that from the client GUI, Proactive Threat Protection options, View Logs, System Log tab

discussion comment 08 Dec 2011

Paul Murgatroyd commented on: A bug of SEP RU1?(Download Insight)

What do you see in the client system logs?

discussion comment 08 Dec 2011

Paul Murgatroyd commented on: A bug of SEP RU1?(Download Insight)

How long has it been left following installation? Have you rebooted after install? If you run LiveUpdate, can SEP fix itself (it should be able to)

discussion comment 08 Dec 2011

Paul Murgatroyd commented on: Binaries (like microsoft.practices.enterpriselibrary.common.dll) downloaded by WEB app to client PCs are detected by SEP 12.1 (active scan) as Malware (WS.Reputation.1)

Leonid, You submit applications and files for whitelisting here: https://submit.symantec.com/whitelist/isv/