The Symantec Endpoint Protection Manager (SEPM) sends an email notification to the default admin user's email address in the event of database failure. After changing the email address of the default admin user within the SEPM, these email alerts are still sent to the previous email address.
A 'database down' email is formatted as follows:
Subject: Database is down
Server Name: <Server Name>
Server IP: <Server IP Address>
The Symantec Endpoint Protection Manager database has gone down and needs immediate attention.
The SEPM caches the email address of the default admin user when the Symantec Endpoint Protection Manager service starts. The cache is not updated except by a service restart.
To update the cached default admin user account email address, restart the Symantec Endpoint Protection Manager service. After the service is restarted, subsequent email alerts will be sent to the new email address.