Endpoint Protection

 View Only

  • 1.  Need permissions to delete old definitions

    Posted Aug 27, 2012 02:01 AM

    Hi all, I've got a server (Windows 2008), which have only 83Mo of free disk space on C:. I need to free up disk space by deleting old definitions in

    C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\Definitions\VirusDefs

    When I try to delete there directory, I've got an error : 'Acces denied'

    I'm admin of the server, the UAC is deactivated. The NTFS rights are ok. I have do an SMC -stop but nothing new.

     

    Can someone help me ? Thanks.



  • 2.  RE: Need permissions to delete old definitions

    Posted Aug 27, 2012 02:06 AM

    Check thi similar Thread

    https://www-secure.symantec.com/connect/forums/old-definitions-eating-disk-space



  • 3.  RE: Need permissions to delete old definitions

    Broadcom Employee
    Posted Aug 27, 2012 02:31 AM

    can you check this article and see if it helps

    http://www.symantec.com/business/support/index?page=content&id=TECH103176

     

    also do not delete the folder in use.



  • 4.  RE: Need permissions to delete old definitions

    Posted Aug 27, 2012 02:54 AM

    Symantec Endpoint Protection (SEP) 12.1 client is maintaining multiple virus definitions versions on servers

    http://www.symantec.com/business/support/index?page=content&id=TECH180056

    https://www-secure.symantec.com/connect/forums/endpoint-121-ru1-virus-definition-consume-disk-space#comment-7574221



  • 5.  RE: Need permissions to delete old definitions

    Posted Aug 27, 2012 05:06 AM

    Hi pete_4u2002, I've already do a SMC -stop and trying to delete directory, and I have the message "acces denied".



  • 6.  RE: Need permissions to delete old definitions

    Broadcom Employee
    Posted Aug 27, 2012 05:38 AM

    right click on the folder and check the security settings?

    did you try restarting and following the actions of deleting the files?

     



  • 7.  RE: Need permissions to delete old definitions

    Posted Aug 27, 2012 05:41 AM

    NTFS security are ok. At 12h00, I will reboot the server and see if I can delete directories.



  • 8.  RE: Need permissions to delete old definitions

    Posted Aug 27, 2012 06:21 AM

    Rebooting the server has make folders disappeared. No need to delete it manualy.

    It's a pity that we need to reboot a server and interrupt service to user, just for deleted old definitions.



  • 9.  RE: Need permissions to delete old definitions

    Broadcom Employee
    Posted Aug 27, 2012 06:25 AM

    :-), looks like it was locked



  • 10.  RE: Need permissions to delete old definitions

    Posted Aug 27, 2012 06:34 AM

    Hi DCourtel,

    As per my comments you can't check my artical.

    Solution



    Most of the computers that are affected have been found to be running scheduled scans at the same time as the LiveUpdate session.  Scheduling the scan for a later time (or switching from daily scheduled scans to weekly) will typically enable the older definition sets to be successfully deleted by SEP.

    Additional workarounds are available, though neither will prevent the issue from happening again:

    • Reboot the machine. In observed cases where definitions had been marked for reboot, this does actually remove the definitions.
    • It has also been reported that stopping the client services and deleting the older virus definitions is also successful in clearing them out.

    Symantec is currently investigating the issue further and this document will be updated when more information is available.