Hi everyone!
I'm currently evaluating trialware version of Endpoint Protection Manager (SEPM) with managed client. (SEP)
I have encountered a problem: Client policy update takes no effect. I tried blocking Notepad.exe, in Application and Device control policy (ADC), and blocking a website by domain name in Firewall policy, both takes no effect. I can still launch Notepad.exe and visit the blocked website.
My test environment:
1. Windows XP professional version 32bit with latest service pack and update. Both SEPM and SEP are installed on the very same VirtualBox machine.
The VM host runs on Windows 7 64-bit.
I have tried:
1. https://support.symantec.com/en_US/article.TECH105...
a. I believe SEP connected to SEPM, due to: SEP icon shows green dot. Trouble shooting shows "connected". Server name is correct.
b. My SEPM contains only default group. SEP client resides in "My company\Default group" as expected.
c. SEPM and SEP shows same policy number. I checked SEPM, in clients-> Default group --> policy serial number. In SEP, I checked trouble shooting dialog, both showing same policy serial number.
d. %temp%\scm-ui.log and .err. : I can't find obvious error which can be identified based on my limited level of knowledge.
e. C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agent\<very long serial> : "Date modified" changed after policy editing as expected.
f. editing index2.xml in aformentioned directory shows correct policy number, profile.xml contains expected string I entered as policy name (such as "No notepad")
g. secars test passed. localhost:8014/secars/secars.dll?hello,secar shows "OK".
h. I've tried regsvr32 msxml3.dll, which said succeed
Additionaly, I also tried:
2. Confirmed ADC and NTP module are activated in add/remove program, in my SEP client.
3. SEPM and SEP are updated. SEPM is updated immediately during installation.
4. Restarted smc, and SEPM service, rebooting computer, all several times.
5. Reinstalled whole virtual machine.
6. Duplicated a VM and install only managed SEP client.
7. Used Symantec help tool
Am I missing something? Thanks in advance, and sorry for my poor English.