Hey everybody, I work for a company that has 500+ servers running SEP 12.1 or higher and every week we get alerts on dozens of servers that don't have the most recent virus definitions.  I'm currently working on 20 servers that haven't updated their definintions in 3 or 4 days and I'm having a heck of a time trying to get them updated.  Here is a list of what I've tried thus far.

1.) Running the latest virus definition exe download

2.) Copying the JDB file to %ALLUSERSPROFILE%\Symantec\Symantec Endpoint Protection\CurrentVersion\inbox.  When I do this and run Live Update it will find 1 or 2 virus definitions and appear to get installed but they actually don't.

3.) Update Content from the SEP Management Server

I've pretty much done anything I can think of short of uninstalling and reinstalling SEP.  That's worked for us in the past and that's usually what we've had to do, but I'm not going to do that anymore.  We have way too many problems with definition updates and I'm hoping someone can help us.

Run the symhelp tool on one affected box to see what it shows:

Download the Symantec Help (SymHelp) diagnostic tool to detect Symantec product issues

http://www.symantec.com/docs/TECH170752

Troubleshooting computer issues with the Symantec Help support tool

http://www.symantec.com/docs/HOWTO80839

Have you check the disk space is available on that clients?

Clean the defintion

How to clear out definitions for a Symantec Endpoint Protection 12.1 client manually

SymHelp will check for virus definition corruption and disk space usage with respect to the virus definitions.  This may help you to get a quick profile on whether these are relevant symptoms/factors.