Endpoint Protection

 View Only
Back to discussions
Expand all | Collapse all

computer and ip address in symantec report Non-conforming

  • 1.  computer and ip address in symantec report Non-conforming

    Posted Nov 29, 2014 04:37 AM

    Hi 

    when i received SEP reports i found this issu 

    in computer user ip adress 

     

    Capture.PNG

    My Notes

    1- user name (hany.re) not allowed to login computer PC88

    2- when i checked PC88 users i didn't find hany.re profile 

    please advise me 

     



  • 2.  RE: computer and ip address in symantec report Non-conforming

    Posted Nov 29, 2014 04:48 AM

    This is a known issue. What version of SEP are you on?

    Related KB articles are here:

     

    When new virus definitions are in place and the quarantine is being scanned, a DWH file is created and detected by Auto-Protect

    Article:TECH102953  |  Created: 2007-01-19  |  Updated: 2012-07-10  |  Article URL http://www.symantec.com/docs/TECH102953

     

    Defwatch temp files are re-detected in temp folder

    Article:TECH138856  |  Created: 2010-08-31  |  Updated: 2012-04-27  |  Article URL http://www.symantec.com/docs/TECH138856

     

    I would suggest upgrading to the latest version of SEP as this has been improved and hopefully minimised.Please upgrade to 12.1.5



  • 3.  RE: computer and ip address in symantec report Non-conforming

    Posted Nov 29, 2014 04:54 AM

    what Exact SEPM version are you using ?

    This is known issue

    DWH***.tmp files are detected in the user profile temp directory.

    Article:TECH92399  | Created: 2009-01-16  | Updated: 2012-04-27  | Article URL http://www.symantec.com/docs/TECH92399



  • 4.  RE: computer and ip address in symantec report Non-conforming

    Posted Nov 29, 2014 05:24 AM

    Hi Rafeeq

    i don't ask about DWH***.tmp files Issue i know that 

    i am asked about the user name profile i not located on the aftectd PC in the report and not allowed to access this computer user hany.re is not allow to access pc88 

    there is missing in the report 



  • 5.  RE: computer and ip address in symantec report Non-conforming

    Posted Nov 29, 2014 05:33 AM

    Hi James

    i don't ask about DWH***.tmp files Issue i know that 

    i am asked about the user name profile i not located on the aftectd PC in the report and not allowed to access this computer user hany.re is not allow to access pc88 

    there is missing in the report 



  • 6.  RE: computer and ip address in symantec report Non-conforming

    Posted Nov 29, 2014 05:46 AM

    What's exact version are you using ?

    Does user are having access to login that paricular system ?

    May be user profile are created TEMP.

     



  • 7.  RE: computer and ip address in symantec report Non-conforming

    Posted Nov 29, 2014 05:48 AM
    If u r getting this message from scheduled report.. Then sepm is sending old reports ..in which user does not exist... Delete this notification and create a new one..what's your version by the way?


  • 8.  RE: computer and ip address in symantec report Non-conforming

    Posted Nov 29, 2014 08:07 AM

    It's either the DWH temp issue or a bad/old notification. Delete the notification and re-create.

    Also what is the version of SEP you're running??



  • 9.  RE: computer and ip address in symantec report Non-conforming

    Posted Nov 29, 2014 08:52 AM

    Version:11.0.6005.562.

    user dosnot have access to login or use this machine.

    there is no Tem profile on this machine .



  • 10.  RE: computer and ip address in symantec report Non-conforming

    Posted Nov 29, 2014 08:54 AM

    Keep in mind you're running an old end of life version. Try re-creating the notification to start.



  • 11.  RE: computer and ip address in symantec report Non-conforming

    Posted Nov 29, 2014 09:05 AM

    SEP version 11.0

    i deleted the notification and when i created it again i have this error 

    Query Failed

    1-This query could not be processed for one of the following reasons

    The database query timed out. Try reducing the number of filters, or increasing the SQL Server query timeout value.

      2. An unexpected error occurred. Try running the query again by using default filter values.

        3. String encoding was possibly not UTF-8, and may result from copying and pasting data instead of typing data. Try typing data in the input fields. 



        • 12.  RE: computer and ip address in symantec report Non-conforming

          Posted Nov 29, 2014 09:48 AM

          Cause

           
           

          This is caused due to a user profile corruption. This was observed that only when one particular user logs into the sepm the error message was found.The user was a limited user.

          When we were logging in into the sepm through the Admin user the sepm was loading successfully without any errors.

          Found same issue with admin user so created a new administrator in SEPM and able to log on to console with new user account.


           

          Solution

           
           

          If the issue is not occurring through the admin user that means the user profile is corrupt and the we will need to log in through the admin user and delete the corrupted used profile and make a new user.


           

          Query Failed in the Home tab.

          Article:TECH140805  | Created: 2010-09-28  | Updated: 2012-08-18  | Article URL http://www.symantec.com/docs/TECH140805


        • 13.  RE: computer and ip address in symantec report Non-conforming

          Posted Nov 29, 2014 10:12 AM

          First thing I would do on that machine is rebuild the profile. Then follow the steps to delete the quarantine, see here:

          http://www.symantec.com/docs/TECH102953