Using Endpoint Central with Symantec Endpoint Protection

Problem

You have installed Symantec Endpoint Protection (SEP) in all your client computers and you cannot do the following:

  • Copy the UEMS_agent.msi file on computers that are using Symantec Endpoint Protection
  • Deploy configurations, scan for patches and inventory as the agent is not fully functional

Cause

You may encounter these problems if SEP does either of the following:

  • Blocks the file-copy functionality
  • Removes/blocks unknown .exe files from the computer by default

Resolution

You are required to identify the cause for the problem you are facing and follow either one of the following solutions given below:

Enabling the functionality to copy files from a remote location

You should enable the file-copy functionality that is blocked by Symantec Endpoint Protection. This will enable you to copy the UEMS_agent.msi onto specific client computers.

 Adding .exe file names to the SEP exception list

You must add the following .exe file names to the exception list of Symantec Endpoint Protection, for the agent to be fully functional:

    • In Endpoint Central below 11.2.2309.01, the following files are located under
      <installation drive >\Program Files\DesktopCentral_Agent\bin directory (for 32 bit machine)
      <installation drive >\Program Files (x86)\DesktopCentral_Agent\bin directory (for 64 bit machine)
    • In Endpoint Central 11.2.2309.01 and above, the following files are located under <installation drive >\Program Files\UEMS_Agent\bin directory
      • dcagenttrayicon.exe
      • dcagentupgrader.exe
      • dc_cad.exe
      • dcagentservice.exe
      • dcusb32.exe
      • dcusb64.exe
      • dcinventory.exe
      • dcpatchscan.exe
      • dcrdservice.exe
      • dcstatusutil.exe 
      • dcuninstallsw.exe
      • dcrdsagentwindow.exe
      • cfgupdate.exe
      • checkVolume.exe
      • 7za.exe
      • dcconfigexec.exe
      • dcmsghandler.exe
      • gdiplus.dll
      • dcondemand.exe
      • dcswmeter.exe
      • agentupgrader.exe
      • dcchat.exe
      • dcusbsummary.exe
      • dcappcontrol.exe
      • selfserviceportal.exe
      • dcannouncement.exe
      • dcagentregister.exe
      • dcfilescan.exe
      • dcscreenrec.exe
      • dctask64.exe
      • dcupload.exe
      • dcwolsettings.exe
      • usbeDevicelist.exe
      • dcwol.exe
      • 7z.exe
      • agent_troubleshooting_tool.exe
      • AgentQPPMUpgrader.exe
      • dcagentregister.exe
      • DCFAService.exe
      • DCFA64Service.exe
      • DCFAUser.exe
      • dcfilesystem.exe
      • dcremregistry.exe
      • dctoolseventviewer.exe
      • DevExe32.exe
      • DevExe64.exe
      • drvforceupdate.exe
      • file_system_watcher.exe
      • folder_backup.exe
      • mdmregistrationhandler.exe
      • metroapps.exe
      • rdsrunasuser.exe
      • SecureDCProcess.exe

In Endpoint Central below 11.2.2309.01,

  • <installation drive >\Program Files\DesktopCentral_Agent\rds\dc_rds.exe
  • <installation drive >\Program Files\DesktopCentral_Agent\rds\FileTransfer\dcfiletransfer.exe
  • <installation drive >\Program Files\Desktopcentral_Agent\dcconfig.exe
  • <installation directory><installation drive >\Program Files\Desktopcentral_Agent\dcagent.dll
  • <installation directory><installation drive >\Program Files\Desktopcentral_Agent\DesktopCentralAgent.msi
  • <installation directory><installation drive >\Program Files\Desktopcentral_Agent\DesktopCentralAgent.mst
  • <installation directory><installation drive >\Program Files\Desktopcentral_Agent\AgentUpgrader.exe
  • <installation directory><installation drive >\Program Files\DownloadRepository
  • C:\Windows\System32\dclibxml2.dll - For 32-bit systems
  • C:\Windows\SysWOW64\dclibxml2.dll - For 64-bit systems
  • C:\Windows\System32\regsvr32.exe - For 32-bit systems
  • C:\Windows\Syswow64\regsvr32.exe - For 64-bit systems
  • C:\Windows\System32\dcagenthttp.dll - For 32-bit systems
  • C:\Windows\SysWOW64\dcagenthttp.dll - For 64-bit systems

In Endpoint Central 11.2.2309.01 and above,

  • <installation drive >\Program Files\UEMS_Agent\rds\dc_rds.exe
  • <installation drive >\Program Files\UEMS_Agent\rds\FileTransfer\dcfiletransfer.exe
  • <installation drive >\Program Files\UEMS_Agent\dcconfig.exe
  • <installation directory><installation drive >\Program Files\UEMS_Agent\dcagent.dll
  • <installation directory><installation drive >\Program Files\UEMS_Agent\UEMSAgent.msi
  • <installation directory><installation drive >\Program Files\UEMS_Agent\UEMSlAgent.mst
  • <installation directory><installation drive >\Program Files\UEMS_Agent\AgentUpgrader.exe
  • <installation directory><installation drive >\Program Files\DownloadRepository
  • C:\Windows\System32\dclibxml2.dll - For 32-bit systems
  • C:\Windows\SysWOW64\dclibxml2.dll - For 64-bit systems
  • C:\Windows\System32\regsvr32.exe - For 32-bit systems
  • C:\Windows\Syswow64\regsvr32.exe - For 64-bit systems
  • C:\Windows\System32\dcagenthttp.dll - For 32-bit systems
  • C:\Windows\SysWOW64\dcagenthttp.dll - For 64-bit systems

On the computer where the product is installed, you should add dcnotificationserver.exe to the exceptions list

The following .exe file names should be added to the exception list of Symantec Endpoint Protection, for the Endpoint Central Distributional Server to be fully functional:

  • The following files are located under <installation drive >\Program Files\\DesktopCentral_DistributionServer\bin directory (Endpoint Central below 11.2.2309.01) and are located under <installation drive >\Program Files\\UEMS_DistributionServer\bin directory (Endpoint Central 11.2.2309.01 and above):
    • dcagentupgrader.exe
    • dcdsinstallwizard.exe
    • dcdsservice.exe
    • dcreplication.exe
    • dc_httpd.exe
    • 7za.exe
    • ab.exe
    • abs.exe
    • AgentQPPMUpgrader.exe
    • ApacheMonitor.exe
    • dcdshttprequesthandler.exe
    • dcdsondemand.exe
    • dcdsservicerequesthandler.exe
    • dcupload.exe
    • ds_troubleshooting_tool.exe
    • dsAD.exe
    • htdbm.exe
    • htdigest.exe
    • htpasswd.exe
    • httxt2dbm.exe
    • logresolve.exe
    • RemCom.exe
    • rotatelogs.exe
    • wintty.exe
    • <installation directory><installation drive >\Program Files\DownloadRepository

Note: All the above mentioned files and folders are verified and signed by our organization. Excluding them from Antivirus won't be harmful. Excluding the specific .exe files is more complex because it keeps changing over a period of time. So folders can also be added to the exclusion list, so that the specified folders are not scanned. In such cases, ensure that you need to exclude the following folders respectively.

If you are using Endpoint Central below 11.2.2309.01,

  • Agent computers - DesktopCentral_Agent
  • Endpoint Central Server - DesktopCentral_Server
  • Endpoint Central Distribution Server- DesktopCentral_DistributionServer

If you are using Endpoint Central 11.2.2309.01 and above,

  • Agent computers - UEMS_Agent
  • Endpoint Central Server - DesktopCentral_Server
  • Endpoint Central Distribution Server- UEMS_DistributionServer

To know more about the steps to exclude the folder from Scan click here.

Applies to: Agent Installation, Compatible with Symantec Endpoint Protection

Keywords: Uninstall Agents, Agent Uninstallation, Endpoint Central Uninstallation