Stopping the edpa and wdp services on the DLP agent.

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Endpoint Discover
• Data Loss Prevention

Issue/Introduction

You want to stop the edpa and wdp services on the endpoint for troubleshooting purposes.

Resolution

To stop the Endpoint Services, you will need to run service_shutdown.exe, which is part of the Symantec_<version>_Agent_Win-IN.zip package that comes with the agent installer.

This tool shuts down the agent (edpa) and watchdog (wdp) services. As a tamper-proofing measure, it is not possible for an end-user to individually stop either the agent or watchdog service. This tool enables you to stop both DLP services at the same time.

The tool must be executed on the agent machine and present in the same directory as the agent's keystore file (ks.ead). This file is normally installed in the agent installation folder, e.g. c:\program files\Manufacturer\Endpoint Agent. If the password is not entered at the command line, the tool will prompt you for a password. If you used the endpointkeytool to set a different tools password, then you should use that password instead.

To execute this tool, run on the agent:

1. Open a command prompt.
2. cd to the directory where ks.ead file is present.
3. Type the following command:
   service_shutdown
4. The tool will prompt you to enter a password. The password should be the tools password set by the DLP admin while creating the agent package.