After applying Windows Updates for Windows Server 2008 R2 in early 2018, the virus definitions for Symantec Mail Security for Microsoft Exchange (SMSMSE) no longer update at the scheduled time. If LiveUpdate is run manually, the definitions update successfully.
When opening the Windows Task Scheduler, an error is displayed "Task AtX: The task XML contains an unexpected node".
When installed to Windows Server 2008 R2 and before, SMSMSE creates scheduled tasks for both LiveUpdate and scheduled reporting using the Windows Task Scheduler 1.0 API. These tasks will show a format AtX in the task scheduler, where X is a number.
Some time in January 2018, a Windows update appears to have disabled the ability to run At type scheduled tasks. Symantec is investigating which patch made this change and will update this article when more information is available.
This issue is resolved in Symantec Mail Security for Microsoft Exchange 7.9.0
Work-around:
Symantec has released a patch to allow administrators to specify to use the 2.0 version of the Task Scheduler API for SMSMSE's scheduled tasks.
Note: This patch applies only to SMSMSE version 7.5.6. Upgrade to 7.5.6 prior to applying this patch.
To switch scheduled tasks to version 2.0:
After completing these steps, SMSMSE should now update definitions at its scheduled time(s).