Endpoint Protection

  • 1.  Event ID 10029

    Posted Aug 29, 2011 01:14 PM

    Hi, I have a Windows 2008 STD Server and I got the Event ID 10029 message.

    Below are the edtails...

    =============

     

    Log Name:      System
    Source:        Microsoft-Windows-DistributedCOM
    Date:          28/08/2011 10:59:24 PM
    Event ID:      10029
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          N/A
    Computer:      servername.domain name
    Description:
    DCOM  started the service LiveUpdate with arguments "" in order to run the server:
    {03E0E6C2-363B-11D3-B536-00902771A435}
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
        <EventID Qualifiers="49152">10029</EventID>
        <Version>0</Version>
        <Level>4</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2011-08-29T02:59:24.000Z" />
        <EventRecordID>151237</EventRecordID>
        <Correlation />
        <Execution ProcessID="0" ThreadID="0" />
        <Channel>System</Channel>
        <Computer>servername.domain name</Computer>
        <Security />
      </System>
      <EventData>
        <Data Name="param1">LiveUpdate</Data>
        <Data Name="param2">
        </Data>
        <Data Name="param3">{03E0E6C2-363B-11D3-B536-00902771A435}</Data>
      </EventData>
    </Event>

    ============================= has anyone seen this before what causes it and do I just ignore it and can I disable from event log? Thanks in advance for your response



  • 2.  RE: Event ID 10029

    Trusted Advisor
    Posted Aug 29, 2011 01:39 PM

    Hello,

    What version of Symantec Antivirus have you installed??

    Is that Symantec Antivirus version 10, Symantec Endpoint Protection 11.0.5002, Symantec Endpoint Protection 11.0.6005 or Symantec Endpoint Protection 12.1

    There could be many causes of this Event ID 10029 to occur. However, as per Microsoft, This is a normal condition. No further action is required.

    http://technet.microsoft.com/en-us/library/cc774485(WS.10).aspx



  • 3.  RE: Event ID 10029

    Posted Aug 29, 2011 01:54 PM

    we had this on windows 2003

    it had Backupexec installed too, we upgraded it to latest 11.0.6 version and did not see this again

     

    LiveUpdate will not run or start, DCOM error 10005 "The service did not respond to the start or control request in a timely fashion."

     

    http://www.symantec.com/business/support/index?page=content&id=TECH91456

    do a repair first and check if that fixes it.



  • 4.  RE: Event ID 10029

    Posted Aug 29, 2011 04:33 PM

    Hi,

     

    It's Endpoint Protection 11 client