Hello,
I worked with Symantec technical support on case 13407675 and their solution was to reboot each server that has this issue. That is not a solution so I'm seeing if anyone can help me on the forums now that we have a few more servers doing this. The issue started after installing the latest Microsoft critical/security updates and rebooting our servers on 9/17. We discovered a week later when SEPM started notifying us that 5 servers were stuck on definitions from 9/17 and would not update. Trying to launch the client from the system tray on each server resulted in nothing. Trying to "smc -stop" only caused the service to hang indefinitely at "Stopping...". Ultimately, a reboot was required for each server to get the SEP client to update. I worked with Symantec technical support and this was their "solution".
Now, as of today, we have two more servers doing this. Their definitions are 9/26/17 r7. Same symptoms as before. A SymDiag report provides no useful information...something about some print drivers waiting to update but that same "issue" shows up on clients that are working just fine.
We can't just reboot servers outside of monthly scheduled maintenance on a regular basis to get them to update their definitions. And this would be horrible if we had rolled out SEP 14 to our 3,000+ client computers and had this issue. At least we only have about 150 servers to deal with, but 7 servers out of 150 (and that number will likely continue to grow) is a high failure rate for the SEP client. If we can't get an actual resolution for this issue soon, rather than this reboot workaround, we will be switching to a competing product and canceling our contract with Symantec. We never had major issues like this with SEP 12; if we can't rely on SEP 14, a product that's been out about a year now, then we can't rely on Symantec. We've been putting up with the excessive CPU usage of SEP 14 (compared to 12.1) in hopes that we can get it tweaked with enough exceptions to stop that, but we can't continue rebooting servers to get them to update definitions. I hope we can get a resolution to this; we have been preparing to switch vendors if not.
Thank you for any help you can provide.
Greg Mackey
Systems Engineer III
University of Central Oklahoma