Endpoint Protection

I've put my install log here:

http://www.2shared.com/file/8873102/bb0d8bc8/SEP_INST.html

I cannot get the client to come up as managed and also Smc.exe is at 50% CPU usage when system idle.

I've tried a bunch of fixes that have worked in the past but cannot get this one to go.

Any thoughts on the issue from what's in the log?

regarding the Smc.exe... are all the PCs that are not converted to manage all have 50% CPU usage?
We might get a trend here..
thanks..

which version are you using? And what is computer CPU and Ram?
Thanks
Fatih

This might help...

https://www-secure.symantec.com/connect/forums/smcexe-taking-50-cpu-when-idle

I found a link that had the same issue Smc.exe at 50%... even when idle...

SMC might be taking the CPU up when it is reading the logs.
A quick resolve was taken by doing this based from the link above...

Click Start, Run then
smc -stop (enter)
delete all the log files in the folder
Click Start, Run then
smc -start (enter)

but the client was having this issue with an older version of SEP...
Thanks...






 

On version11.0.4202.75

2.39 Ghz with 2Gb of RAM

Yes all 3 of my PCs that will not come up as managed currently have the Smc at 50% and they are idle

I tried deleting the logs but that did not work. Interestingly enough, I'm remoted in and once I started smc again, I lost connection but able to reconnect and Smc was 50% CPU usage again

Hi bpohlman..
Had you tried the link above?
thanks...

Yes, I did but it was unsuccessful.

If I upgrade the client to 11.0.5 does SEPM need to be upgraded as well?

Can anyone tell me what Smc.exe does or point me in the right direction to do some research on it?

if you find any files here. try deleting it and check if CPU goes down
when it runs the scan, it will scan the quarantine and will take high cpu

C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine folder

I did not have a quarantine folder so I was unable to delete anything.

Seems like it was a bug and fixed in MU5
from your post I see that the client was failed to communicate with the manager ( you have mentioned that you cannot get the client to communciate)

SMC.exe uses entire CPU core and client/manager communication fails after migrating or installing the Symantec Endpoint Protection client
Fix ID: 174134
Symptom: After upgrading a Symantec Endpoint Protection client, communication with the Symantec Endpoint Protection Manager fails because the default gateway is not in the same subnet.
Solution: Enhanced the process to find the best route to the server after the gateway IP address changes.

Please check this release notes and upgrade to MU5 to get the issue resolved

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007121216360648

I would suggest you to upgrade your clients to MU5, however your SEPM does not have to be upgrade to MU5, here is the discussion for your reference

https://www-secure.symantec.com/connect/forums/can-sepm-mr4-mp2-server-manage-sep-ru5-client

Upgrading now. Will let you know. Thanks.

All 3 were upgraded to MU5 and connected successfully to SEPM. However, since I installed as unmanged and used sylink drop to make managed, the 3 PCs are showing up in the wrong group, even though I exported the sylink from the correct group. Any ideas?

Thank you for the help so far!

I think its because of previous left out registy they are showing up in wrong group.
you may right client on the client and select the option move and move them to correct group
Please check the CPU utiliztion and let me know if the issue is fixed.
 

Yes, I forgot to mention that the Smc CPU utilization is at 0 while idle. Thank you!

I do not have the option to move the clients by right clicking and selecting "Move", is there another way?

good to hear that.:)

Have you imported the clients from active directory?
if its from AD right click on the group and select sync.

you should have the option to move the clients.

Open Symantec endpoint protection manager
click on clients tab
select the group
on the right hand side locate the client
right click the client and select the option move

Perfect. Thanks again for all your help.