Link to home
Start Free TrialLog in
Avatar of Reece
ReeceFlag for Australia

asked on

network connection dropouts on domain

A number of computers in our office network are having network critical programs dropout once or twice a day.
At first I thought it was an issue with one of our switches because it seemed to be only happening in certain departments, but what I've found is that it is the specific program that is dropping out, and not EVERYTHING.

i've been looking through the event viewer on the client PC's and on the domain server and the only similarities of events that I can find around the general time of the dropout is that LiveUpdate (for symantec endpoint and/or backup exec) started, stopped and deployed.

I've checked the liveupdate policies but it doesn't seem to be paying attention to the schedule I made.

but then again, how can I even be sure it is liveupdate causing the network interruption?
SOLUTION
Avatar of SHB
SHB
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Reece

ASKER

do I disable on the domain server or on the affected workstations?
how do I do this?

as far as I'm aware, there are no scheduled tasks set around the time(s) that liveupdate decides to do it's thing and it seems to at 11am-ish rather than the 1.05pm time I've set in the manager.  Obviously I'm missing something.

User generated imageUser generated image
You need to disable the update from the affected workstations.
Avatar of Reece

ASKER

I don't think it is the client PC's now as the issue is affecting computers that don't have SEP installed.
Our domain server (which is the SEP manager) also has SEP client installed.  Maybe that is the issue.
Anyways, the problems that the server has is that it stops DNS temporarily (meaning none of the connected computers can browse the internet), interrupts QuickConference (a LAN instant messaging program) and interrupts client connections to a networked accounting program called Locus by LexisNexis.

It did it today at 12.25pm-ish which is about 1hr 15mins later than it usually does.  I've had a look at event viewer logs and AGAIN, a LiveUpdate took place at around that time.

I've attached a copy of the event viewer system log, the SEPM system log (for the server) and the SEP system log (for the server's install) and a screenshot of the liveupdate policy settings/schedule.

I'm pretty confused with this.

User generated imageUser generated imageAV-system-log.csv
system-report.csv
System-Event-Log.csv
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Reece

ASKER

I've requested that this question be closed as follows:

Accepted answer: 0 points for reecem27's comment #38240427

for the following reason:

self resolved
Avatar of Reece

ASKER

please award 250 points each to Shbasha and wtandrews but mark my post (2012-07-31 at 11:47:00ID: 38240427) as the best solution.
Avatar of Reece

ASKER

thank you