Hi all,
in the first step I am sorry my english isn't very good.
To the problem:
We have a problem with blue blank screen before system shutdown. User clicks to start button and then to system shutdown. System goes almost to shutdown but before turn off system remains in blank blue screen with mouse (no BSoD). We have this problem from about December 2012 after deployed SEP12 RU2.
When we uninstalled Symantec Endpoint Protection problem has been solved.
After SEP12 install problem has been back.
Problem isn't solved in SEP12 RU2 MP1 and SEP12 RU3.
When computer is in descripted problem then with the mouse can be moved, CTRL+ALT+DEL not responding, network is online but only using ping from another computer. User can shutdown system only using power button.
In system log is standard record "The Event log service was stopped."...
We tested individualy drivers SEP12 and when we stopped driver srtsp.sys (Symantec Realtime Storage Protection) then system worked good.
We noticed that the problem is only on computers with Altiris Recovery Solution and
at the same time after finishing Recovery snapshot. We have this "Recovery Solution" very long time without any problems.
We were looking for solving about Recovery, but version of driver (ofmlvdrv.sys) is same in Altiris Recovery 6 and 7.
We do not expect that solution will by the way of modify "Recovery Solution".
On the website about "New fixes and features in Symantec Endpoint Protection 12.1.4" is nothing about my problem... But I will try it...
Do you have the same problem?