A single Symantec Endpoint Protection (SEP) client is not behaving as expected and symptoms do not yield an obvious known technical solution. An error indicates a missing component. A SEP client services fails to run.
The installation of almost any software could potentially suffer from some unanticipated environmental influence and cause an incomplete install or removal of that software. Uninstallation, sometimes manual or with a support provided utility, and reinstallation often resolves the unusual issue experienced.
For the Symantec Endpoint Protection client, corruption of the software may become evident in the following circumstances:
Symantec Diagnostic Tool (SymDiag) is a Symantec support utility that provides self-help reporting that attempts to alert the user to possible problems with an installation of Symantec Endpoint Protection. SymDiag can help to answer the following questions about a particular installation of Symantec Endpoint Protection (SEP) client:
For more information on how to run SymDiag to help answer these questions go to:
TECH210694: 'How to run and use Symantec Help reports'
Corrupt Content Definitions
For more information on how to identify and resolve issues pertaining to corrupted content definitions in the SEP client go to:
TECH92043: 'Troubleshoot corrupt definitions in Endpoint Protection'
For more information on how to troubleshoot a service failure in the SEP client go to:
TECH92415: 'Are Endpoint Protection drivers loaded and services running?'
Other Signs of a Corrupted Installation
SymDiag performs the following tests in a self-help report (available under either 'Scan for common issues' or 'Check product install requirements') that might identify a corrupted installation of the SEP client:
*These tests assume that SEP is installed under the standard name of "Symantec Endpoint Protection"
None of these tests are conclusive that there is a corrupted installation of the SEP client, but they may indicate a need for further investigation or they may help with troubleshooting unexpected behavior from the product. One scenario that this report can detect is a SEP client that has been uninstalled but not rebooted. In this scenario, the SEP client is removed from the MSI but registry values and services are still present on the system. The solution is to simply reboot the system.
Uninstalling a Corrupted Installation
For more information about how to remove Symantec Endpoint Protection go to:
TECH184988: 'Uninstall Symantec Endpoint Protection'