Restart bulk agent services (WDP & EDPA) Manually

[Sona T]

Hello Team,

Customer is having 40000+ agent where they want to restart the agent services .

Please note that the agents are in not reporting status , while checking the edpa and wdp services they are in manual mode 

Few of the system we have tested by restarting the services after taking remote of the end machines and its working fine.

Our concern is if the count is nearby 40000+ system which is not reporting to the Enforce server how we can restart the services ???

Thanks and regards
Sona

[Barnabas Toth]

Hi Sona,

Probably the problem is with the Endpoint server, I would restart that first.
I don't think that you should solve it from the Endpoint side, however services will restart when the machine restarts.
Check connectivity issues, load balancers, etc. There must be some error in the endpoint client logs as well.
DLP Agent Connectivity Troubleshooting

Broadcom		remove preview
DLP Agent Connectivity Troubleshooting Resolution First, determine if the agent is healthy. Go over the following agent health checks to verify if the agent is healthy or not If you have confirmed that the agent communication is not in a healthy state then proceed with the troubleshooting below. View this on Broadcom >

Good Luck!

------------------------------
Barnabas

Mark solved if happy with the answer!
------------------------------

[DLP Solutions]

Sona,

I am wondering why EDPA and WPD are even in Manual mode.. this sounds like a MAJOR issue.
The agent services should ALWAYS be in Automatic mode.
So who ever installed all of the agents to be Manual, did the installation wrong.

So even restarting the machines will NOT help start the Agent services.

The other option is to send out SC commands to start the EDPA services on remote machines.

"SC \\machinename start EDPA"
"SC \\machinename start WPD"

You can probably script this out, but will need to make sure you have the right Admin privileges (elevated account) to RUN the command and start the services on those machines.

Also think about scripting out setting the services to automatic..

SC \\machinename CONFIG EDPA start= auto
SC \\machinename CONFIG WPD start= auto
(Note that the space in between "start=" and "automatic" is required!)

------------------------------
Good Luck. - RP
PLEASE MARKED SOLVED WHEN POSSIBLE
------------------------------

[Sona T]

Hello,

Thankyou or the suggestion provided,

The DLP was installed and was working fine , the issue of occurred all of a sudden .
While going to endpoint and changing the manual mode to automatic mode and restating the agent it is reporting and working fine 
Any idea why dlp agent went yo manual mode all of a sudden ??


Thanks and regards
Sona

[DLP Solutions]

Sona,

The only way that it was changed to manual is if someone changed it.
There is no OPTION as part of the typical installation (Using the installer) to have it set to anything other than Automatic.

The only way to change the startup setting is if someone, with ADMIN level permissions, could modify BOTH services to be manual. I am assuming that your endpoints have admin level controls so that ONLY certain people/groups can change the service settings.

As a start look at how the agent is being installed, maybe the script or process of installing the agent is not being done correctly. The agent installer needs to be generated using the console, and then you should be running the Installation batch file as a Local Admin level account (not a domain admin).

Thank you,

Ronak Patel
[e-mail]<mailto:[e-mail]>
Mobile: [phone]
www.dlpsolutions.com<http: www.dlpsolutions.com="">
[Description: SP_DataLossPrevention_logo]
_____________________________________

This email and any attachments thereto may contain private, confidential, and privileged material for the sole use of the intended recipient. Any review, copying, or distribution of this email (or any attachments thereto) by others is strictly prohibited. If you are not the intended recipient, please contact the sender immediately and permanently delete the original and any copies of this email and any attachments thereto.

[Sona T]

Hello Ronak ,


Thankyou for your suggestion

Regards,
Sona