How to collect ProfileManagement.dat from SEP

Products

• Advanced Endpoint Defense (with SEP)
• Complete Endpoint Defense (with SEP)

Issue/Introduction

Technical support might request the collect of SEP ProfileManagement.dat, and this article will guide you step by step on how to collect this file.

Resolution

Steps to collect ProfileManagement.dat:

1. Disable Tamper Protection
2. Disable ccSettings drive by setting the "Start" to 4

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ccSettings_{5A707291-D25F-4DA1-80E2-0F8C86965AC7} 

"Start"=dword:00000004

Note: GUID may be different for your install.

3. Reboot the machine.
4. Copy the entire "Config" directory to the desktop

C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Config

5. Enable ccSettings drive by setting the "Start" to 1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ccSettings_{5A707291-D25F-4DA1-80E2-0F8C86965AC7} 

"Start"=dword:00000001

6. Reboot
7. Enable Tamper Protection

Archive and return the Config directory along with a SymDiag.