Endpoint Protection

Hello, this is my first post, go easy on me please :-)

I recently deployed SEP 11 in a Windows 2k3 network environment with the client machines mainly running Windows XP Pro.  Our corporate mandate is to have two scans run during the work week.  Unfortunately we have some older machines (some still running W2KPro) that are bogged down by the scans and slows processing to a crawl.  I had recommended to my boss to keep the machines on at night and let the scan run then.  He countered with the cost saving excuse of needing to conserve power so he asked if there was a way to run the scan and then have the machines shut down afterwards.  I haven't looked completely through the Admin guide yet but I was pretty sure SEP didn't have this capability.

Has anyone been able to do this, either through Group Policy or through SEP Management console?  Any input would be appreciated, thank you!

Currently that is not an option you can do via the SEPM.
I dont' think this is a bad idea however.
You should create an Enhancement request in the Ideas forum for our Developers to see.

I would imagine you could some how configure a GPO to do this though.

Its still under Ideas
 https://www-secure.symantec.com/connect/idea/automatic-shutdown-after-full-scan

It is not possible to Shut down a machine when` a scan run completes .
there is not setting in SEPM to do this,

You could run an auto shutdown program, but you would have to be sure to allow extra time for the scan to run completely as scan times can very greatly.

Best,
Thomas

 Altiris can do this, and integrates with SEP.  

I think you have experiencing a hardware failure, have you check the event viewer for the error before shutting down?

I figured there wasn't an option for it and i'm not to sure how I coud configure it to shutdown as the scan completes.  I am not well adverse to writing scripts so that's probably out of the question.  I guess I can research more into GP possibly being a solution.  I thank you all for your input.  Really appreciate it.

If you are referring to slowness of the machines when the scan runs, yes it probably is.  I work for an unfortunately "cheap" company so I still have PCs, alot of PCs that are more than 6 years old and still run on not even a half a gig of memory.  It's very frustrating.

Thanks, i'll check into Altris.

If you wanted to spend the time learning, I believe that you could do what you want with a Windows Powershell script. It should be fairly straightforward to to monitor the process list for RTVSCAN.EXE and then shutdown the machine when it's processor usage drops below a certain percent for a certain time. Scripting skills can be invaluable. This sounds like a good learning opportunity.

I agree, I think powershell could do this for you...it is exceptionally powerful.  I haven't used it a lot, so I"m not proficient in it, but we've been able to get it to automate things easily.

Our Win2000 server got a similar problem with SEp 11.00. One day after instalation some of our server shut down it self. Event viewer just inform that the previous system shut down at xx:xx on dd/mm/yy was unexpected.

I found once that the system has terminated a system process "SERVICES.EXE ..... " so then the system restart with count down time.

There is an article for SEP 10 "Blue screen with "STOP 0x0000007f" error on Windows 2003/XP/2000/NT"
found on
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2002071208532048.

My machine doesn't goes blue screen, just restarting with count down time.

I haven't try to modify Registry value as recomended because I can't find any key mentioned in that article.  The registry key is
HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\Storages\Filesystem\RealTimeScan