Endpoint Protection

Hi All,

We have server that we recently upgraded with no reboot option. but it is asking for reboot and we also recieved an alert that it will auto reboot the server at the specified time. Is there any way where we can stop this reboot?  

Like Smc -stop or is there any registry key that can be modified to prevent this.

Assuming you configured the package correctly to not reboot, you need to check the Group restart settings. Go to the Group in SEPM that this client is in.

Select the Policies tab >> Restart Settings tab. Make sure it is configured correctly to not reboot.

Hi Brian,

Thanks for the quick update, we have checked the same and it is set for  no restart in the group policies.

What does your setaid.ini file look like? The only other option that makes sense is the setaid.ini file in the package is configured to reboot.

The package is created as a single setup.exe... so for now we don't have an option to check that file as well...

After the upgrade completed on that server, we got the notification about the reboot and it also notified as it will reboot it at 4:00 AM tomorrow.

Seems to me the package was configured with a delayed restart. 

What is the exact version of SEPM and SEP client?

SEP client version is 12.1.3 and SEPM version is 12.1.6 MP5

Is there any option to suppress the auto reboot.

Well it looks like this may be a known issue, which was fixed in SEP 14 MP1, pulled from the fix notes:

Reboot settings do not appear to work after installation

FIX ID: 4038133

Symptom: You create an installation package with custom settings, a silent installation with a delayed restart. After installation, however, the restart prompt does not match the delayed restart. If the client you install does not include the firewall, the post-install reboot request sometimes does not follow policy.

Solution: When Symantec Endpoint Protection is installed without the Firewall feature, Symantec Endpoint Protection no longer requests a reboot without honoring the installer reboot policy.

 Probably best to get a supprot case open. 

The only other thing I can think of is to configure restart settings on the group now and try setting it to 'No Restart'. That may/may not work though, especially if this is a bug. Support may have other work arounds.

This is the setting i am looking for cannot find how to get to "Generial setting for default group"?
i am in policies but cannot find my delayed restart policy?

This is an useful article.

https://support.symantec.com/en_US/article.TECH132159.html