How to prevent symantec antivirus client 10.0.0.539 from disabling auto-protect.

I noticed on 08/02/08 that the antivirus client was disabled on our exchange server.
I checked eventviewer and back on 29/01/08 it had this entry:

Event Type:      Warning
Event Source:      Symantec AntiVirus
Event Category:      None
Event ID:      6
Date:            29/01/2008
Time:            07:16:53
User:            N/A
Computer:      EXCHANGESERVER
Description:      Auto-Protect Error: Auto-Protect is disabled because registration of the virus databases failed

This happened just 2 seconds after the daily definition update:
"New virus definition file loaded. Version: 100128r."

I could turn auto-protect back on manually, but the worrying part is that our exchange had been running without auto-protect for over a week.

Any ideas why the av client disabled itself and what I can do to prevent this from happening again?

Our exchange server runs on windows 2003 sp1.
Symantec client version 10.0.0.539, engine 103.0.2.7)
All clients get their definition updates from our primary server running Symantec System Center corporate enterprise edition 10.0.0.539.
mpraagmanAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

kmotawehCommented:
dear , first of all i have to ask about the sp1 why don't upgrade to sp2 and i think it will solve to much issues and after that i have toask if have exclusions on the symantec antivirus client of the iis folders and the exchange folder and the database folder beacuse it could be that the scanner engine go scan the information store file when it's writing or changing and goes into a loop because it doesn't understand it and instead of hanging your server it  goes to disable the autoprotect which goes scanning a file for a very long time
0
mpraagmanAuthor Commented:
Thanks very much for the advise, I see we have some work to do!
The symantec client does a full system scan, so includes all the exchange and iis folders.
Will look at the sp2 upgrade and the folder exclusions next.
0
snoopfroggCommented:
mpraagman,

You can prevent a client from disabling auto-protect by going to the Symantec System Center, enabling auto-protect for the group that the server belongs to, and locking the setting (toggle the lock icon).  This will enable auto-protect on clients but will present a grayed out "Enable Auto-Protect" if a user opens the Symantec Antivirus client and goes to Configure -> File System Auto-Protect.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

mpraagmanAuthor Commented:
Thanks, that's good advice about how to manually configure auto-protect. It still leaves the question what the error message actually means and why it happened, but I will first need to do the service pack and set folder exceptions and hopefully I will never see the error again.
0
zirasunCommented:
Hi gys I'm Moussa Keita  IT adminstrator from Mali.
I had two laptop with symantec Anti-virus but it are expired. I like to  uninstall symantec anti-virus but  I didn't  because I don't know the uninstall PASSWORD.

Can you help me with uninstall symantec without unsinstall PASSWORD?
0
Vee_ModCommented:
zirasun,
Please use the 'Ask Related Question' function - or post an entirely new question.

The Experts here only receive points for new questions - so there is no incentive for them to respond.

Thank you,
Vee_Mod
Experts Exchange Moderator
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.