Endpoint Protection

Liveupdate has been scheduled to 1 hour. 1 client is not running the liveupdate automatically. It only starts ( and downloads the definitions) after a manual download. Other clients in the same group updates automatically just fine.

log.liveupdate does indicate any error whatsoever as it never connects automatically. Mode has been set to "Express".

where did u set the schedule?

the schedule is only to get defs from Internet not from SEPM...

Hello,

I agree with Rafeeq, There are few Questions:

1) Are this Clients - Managed??

2) If Unmanaged, Is the Liveupdate configured from Local Machine?

3) What happens when you click on START > Run > luall.exe

Could you go to the Control Panel, Click on Symantec Liveupdate and Click on Express Mode and Check both the Boxes for Express Mode Settings.

Please Answer the above question and try the suggested steps..

Hi Everyone,

Thank you for your input!

1) Are this Clients - Managed?? - Yes, the clients are managed clients, including the one not updating automatically.

2) If Unmanaged, Is the Liveupdate configured from Local Machine? - Not applicable as all clients are managed

3) What happens when you click on START > Run > luall.exe - The client will connect to an internal LU and start downloading the updates fine.

Could you go to the Control Panel, Click on Symantec Liveupdate and Click on Express Mode and Check both the Boxes for Express Mode Settings. - Client is already on express mode with both boxes checked.

Now there is a differene, when u do luall.exe, its running with your account

schedule runs system account

check if u r using any proxy, if yes then put it in the control pannel liveudpate.

check the DCOM, its simillar 

http://www.symantec.com/business/support/index?page=content&id=TECH99867

Hi Rafeeq,

Pertaining to local vs system account, where can I make sure that there are no permissions problems? Or anything I can troubleshoot regarding this?

It seems that my log.liveupdate log did not indicate any error that may hint on permissions issues (im new to this so I may have overlooked some stuff)

Not using any proxy and I have checked the dcom settings. The panel is blank so I didnt add anything further.

Thank you very much!

Also, I have SEP 11 client and not SAV. Hence I am not able to try the steps (vpdn_lu.exe) in Article: TECH99867 :(

an update:

I have added a windows scheduled task for luall.exe and it works fine.

Based on Symantec's article, it would mean that the system account of this machine is having access issues.

However, I am not able to find a reason why this is so as the machine is not running on any proxy, the firewall is off and it is able to access the internal liveupdate server without any errors.

Default access permissions is already blank.

Anywhere else I should check?

Thanks!