Multiple instances of ccSvcHst.exe seen on Citrix XenApp server when using Endpoint Protection 14 RU1 with Outlook Scanner

book

Article ID: 170879

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

After installing Symantec Endpoint Protection (SEP) 14 RU1 client with the Outlook Scanner to Citrix XenApp server and then setting the LaunchSmcGui registry value to 0 to prevent multiple instances of ccSvcHst.exe from occurring, you continue to see numerous instances of the ccSvcHst.exe process based on the number of user connections to the Citrix XenApp server. This can also cause the Citrix user profile from closing at logoff and can keep the user logged in.

Location of LaunchSmcGui registry value:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\SMC\LaunchSmcGui > DWORD value = 0

Cause

After Outlook is installed, the first run of ccSvcHst will work as expected and the OutlookSessionPlugin unloads itself. Next time forward, the check does not happen and the OutlookSessionPlugin does not unload itself and ccSvcHst user instance keeps running.

Resolution

This issue is fixed in Symantec Endpoint Protection Client 14.2.  For information on how to obtain the latest build of Symantec Endpoint Protection, read
TECH 103088: Download the latest version of Symantec Endpoint Protection