Endpoint Protection

We have SEPM 11.0.6005.563 running on Win Server 2008. This is also our WSUS server. I imaged a PC, installed the Symantec client, and made sure the PC was discovered by WSUS. I noticed that the Symantec client would not update and that I got an error when trying to install Windows updates that were being pushed down. I found that the server was critically low on hard drive space and freed some up.

I then found that I was unable to log into the SEPM console. It just hung at "Logging on to the management server". I had to end task on the console (javaw.exe) and dbsvr9.exe. When I kill the latter process, the Symantec Embedded Database service status goes blank and I have to restart it.

I tried doing a repair from Programs and Features but it hung with the Symantec Embedded Database service status stuck in stopping .I rebooted the server. When I try to repair now, it seems like it gets to the end of the process with 0 seconds remaining and then it rolls back and says there was a fatal error during installation. In the event logs it's error 1603.

Any help would be appreciated.

When you installed the manager, did you use the default website or did you specify to create your own?

There are many threads to this subject of boh WSUS and SEPM living side by side.

* * * * * *

Description:

Symantec Endpoint Protection Manager and Windows Server Update Service (WSUS) can not be installed on the same website. In certain situations, WSUS will utilize the IIS default website. In this case, installing the Symantec Endpoint Protection Manager on the same machine may therefore cause issues. This occurs since WSUS (if using the default website) creates a Virtual Directory called Content. The Symantec Endpoint Protection Manager installation thus also creates a Virtual Directory of the exact same name and overwrites the WSUS directory (since both use a virtual directory called "Content." This directory can be overwritten when installing either application on the same website.

Resolution:

Before installing Symantec Endpoint Protection on a computer running WSUS, check whether WSUS is installed on a default web site. If WSUS is running on the default website, choose a custom website in the Symantec

Endpoint Protection Management installation wizard. If WSUS is running on a custom website, choose the default website. If installing WSUS on a computer running Symantec Endpoint Protection Manager utilizing the default website, choose custom website in the WSUS installation wizard.

 * * * * *

Taken from:

http://www.symantec.com/support/endpointsecurity/customer_installations_issues_with_resolutions_int_112007_partner.pdf

* * * * * *

Also, one might consider upgrading to SEPM 12.1

Because 12.1 now uses Apache and WSUS IIS, there will no longer be the same conflicts over the IIS website and port information.

Of course, it is stil recommended to use a "custom port" for installation of SEPM on the same server as WSUS.

Jason1222 - thanks for the reply. SEPM is using the default website while WSUS has a custom one. They've lived together harmoniusly for a year and a half.

One thing I didn't mention was that SEPM is still updating existing clients just fine, for what it's worth.

I doubt the clients are taking updates from sepm . Please correct me if i am wrong .

Is Sepm up to date ? If client are up to date possible they are taking updates over internet in case sepm is not up to date .

Coming back to original thread Sepm console hangs

Remove content from inetpub folders not only remove the numbered folders not the alphanumric folders

Re-run management server configuration wizard

Reboot the server if possible

And check .

Swapnil - how do I tell where the clients are getting updates? I looked in the log and found only that the defs were successfully updated.

When I re-run the management server config wizard, I am being told that the ports are already in use. Will changing them make a difference?

For Sep client to check where they are updated from check liveupdate policy in Sepm manager or if Sepm on home page latest symantec ie definitions version in top right pane should be updated if it is then sep client are updated from sepm if not they are getting update directly from symantec lu server

Yes it should make change it from 2638 to 2639 and try .

I changed the port and ran the wizard. Logging into the console doesn't hang but gives the error "Failed to connect to the server." Ran repair again for fun and it rolled back just as before. Swapped out the msvcr71.dll but this didn't help.

Service is stopped .

Right. The SEPM service stops.

Run the setup from the install CD. The downloaded software version of SEPM and it would give you an option to repair. The install may have gone corrupt.

Hi,

Before trying to repair the SEPM  disable UAC account in control panel.

Muttu - that worked. I disabled UAC and the repair completed. The console opened fine but hung. I killed it and reopened and it's been working fine.

Thanks to everyone who offered their assistance.