South Africa Security and Compliance User Group

 View Only
  • 1.  SEP agent service(s) changed after upgrading to RU6 ??

    Posted Jul 20, 2015 07:10 AM

    We just upgraded our SEPM and SEP agent on the SEPM to RU6. We notice now that the service for the SEP agent is now called "Symantec Endpoint Protection" . I know that the SEP agent (RU4mp1) usually runs SMC.exe ...what is the new executable as when the check the properties of the service for SEP it shows as running a .dll file.Looking at the task manager , there is no SMC.exe displayed

    Any ideas ?



  • 2.  RE: SEP agent service(s) changed after upgrading to RU6 ??

    Posted Jul 20, 2015 07:28 AM

    I also now notice that the registry entries that were there previously (displays - GUP, username, last date etc).

    has also disappeared. I only see under the SMC key - version and SEP Master service. Where has this gone?



  • 3.  RE: SEP agent service(s) changed after upgrading to RU6 ??

    Posted Jul 20, 2015 07:53 AM

    This was changed back in RU5 to use the ccsvchst only:

    http://www.symantec.com/docs/TECH226046

    Also, as far as the reg information goes, this is all still in the same place.  Have you checked the SEP hive under the Wow6432Node (assuming you're playing with a 64bit Windows installation)?



  • 4.  RE: SEP agent service(s) changed after upgrading to RU6 ??
    Best Answer



  • 5.  RE: SEP agent service(s) changed after upgrading to RU6 ??

    Posted Jul 20, 2015 07:57 AM

    We have both 32bit and 64bit installations(Win 7 and 8.1). Will have a look.



  • 6.  RE: SEP agent service(s) changed after upgrading to RU6 ??

    Posted Jul 20, 2015 07:58 AM

    Can you provide the exact location of this?



  • 7.  RE: SEP agent service(s) changed after upgrading to RU6 ??
    Best Answer

    Posted Jul 20, 2015 08:02 AM

    So on my 64bit Win8.1 box with 12.1RU6 I have:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\LiveUpdate]

    This contains the GUP info (same place as before).

    and...

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink]

    This contains the user/group type info



  • 8.  RE: SEP agent service(s) changed after upgrading to RU6 ??

    Posted Jul 20, 2015 08:09 AM

    Thanks for the information. Much appreciated.