Endpoint Protection

Hi there:

I have an issue after deployment of Symantec Endpoint Protection (RU 6), issue:

• PCs reboot when we attached USB
• PCs reboot when we insert CD/DVD in CD/DVD ROM. 

Kindly guide me.

Best regards

Ishaq

Have you installed full package? If yes then disable NTP and PTP and check it out.

@Mahesh : How is NTP and PTP is realted to the machine getting restrated??

Ishaq..Please stop the SEP service  and then connect the USB or DVD.

Hi

Thanks for your reply, yes I install fullpackage. I try your suggestion.... kindly can you tell me how I disable these two setting NTP and PTP.

Regards

Ishaq.

hi Prachand,

I try to stop SEP and connect USB but some my machine reboot some time not reboot (when disable SEP). This issue happen on number of PC and after SEP deployment.

Best regards

ishaq

What all services have you stopped? Try to stop the following services and check if it reboot the PC after connecting USB or inserting CD

Symantec Endpoint Protection
Symantec Event Manager
Symantec Management Agent
Symantec Management Client

Hello,

Please change this option and note error code. 

My computer Right Click > Properties > advanced system settings > startup and recovery > Uncheck restart options. Therefore we can see bluescreen and windows error code. 

Best Regards.

FAtih

can try to disable the Application and Device Control Policy.

Are you using the application and device control policy? If so, disable it.

Also, what version are you on? If 11.0.5, you will want to upgrade to the latest version, RU6 MP1.

There was an issue when upgrading to RU5 and using the app and device control policy. Upgrading to the latest version will fix this.

RU6 MP1 fixed this error:

Hi there:

Thanks for every body for response. Kindly find information below which are in my side:

Symantec Version: RU6

PC infected: more then 500

when I stop symantec services or uninstall SEP machines not reboot when USB is connected. but when we connect usb machines reboot with blue screeen with physical memory dump (file name which present in blue screen: fltmgr.sys)

Best regards

Ishaq

check this link and try installing hotfix.

http://support.microsoft.com/kb/933215

Do you have installed GFI EndPointSecurity   or GFI Languard Portable Storage Control , if yes What is the version of that?

Please upgrade to GFI EndPointSecurity  Ver 3 to resolve the issue

Hi Pete_4u2002

Thank for providing hotfix, this hotfix resloved issue in my end.

Thanks

happy to be of help :-)