Endpoint Protection

Just wanted to throw a question out there to see if anyone else has experienced this issue before. We have over 4,000 computer in our firm and have recently rolled out SEP11. We first had issues with profiles being blocked, which has since been resolved. Now we're seeing machines(a small number but still....hehe) that have received SEP11 and upon reboot, are dead in the water. The machines boot up to our default background but doesn't load the local machine policy, etc. Ctrl+Alt+Delete never shows up. It's almost as if the machine is locked up but the mouse cursor and the keyboard still work. Safe Mode is the same, boots into Safe Mode but never loads all the way to Ctrl+Alt+Delete. While the machine is up, there is no way to manage it. We've had to resort to imaging the machines to restore functionality. Restoring from the registry is hit or miss and I was wondering if there was an alternate resolution?!?! Thanks

I've seen that a couple times on machines that were having problems beforehand.  I'd double-check that you're running supported service pack levels and that no Microsoft updates had failed on the machines (I know that's hard to do when its not working, you'd have to boot off a CD and then look at the logs).

I can honestly say that it's happened on some machines that were brand new, straight out of the box and imaged. As soon as SEP11 hits it, toast. How did you repair the machines that you've seen having this problem? Also, all of our machines (minus the few out in satellite branches that have been long forgotten...heh) are fully updated.

What version of SEP are you using? What OS and SP? Are the systems that are experiencing the issue all the same hardware type?

Thomas

For 99% of the cases of any failure here, its easier to recover data and reinstall then to try and repair the machine (regardless of the cause). And that's what we did as well.

Using version 11.0.4202.75
Yes, all models are uniform. Dell laptops and desktops, standard dual core procs, 2gbs ram, XPSP3, etc.

We've seen it more frequently now that the SEP11 push has become firmwide and it's affecting both laptops and desktop, already in the field and new builds. Out of 4,000+ computers, we've only seen 10-20 machines. Not a big number but rebuilding a broker's machine 30 minutes before market opens is becoming a headache...

Using version 11.0.4202.75
Yes, all models are uniform. Dell laptops and desktops, standard dual core procs, 2gbs ram, XPSP3, etc.
We've received another machine with the same issue since opening this ticket...any updates or thoughts?

Are you guys running any other security software on these systems like disk encryption, TPM, or other AV?
You might want to open a case with support to get to the root of this problem.

Best,
Thomas

Yes, we're running Trend Officescan as well. I'm scheduled to speak with an engineer concerning this tomorrow morning. Thanks for your response

Please keep us posted on the outcome of your support case.

Best,
Thomas

Will do, thanks

How did you fix the issues with profiles been blocked?

Cheers 

Is there some solution for this problem? I have a rising count of machines since XMAS 2009.
It seems this occurs after restart with some live update before.
Thanx Tom