Using Endpoint Central with Symantec Endpoint Protection


You have installed Symantec Endpoint Protection (SEP) in all your client computers and you cannot do the following:

  • Copy the UEMS_agent.msi file on computers that are using Symantec Endpoint Protection
  • Deploy configurations, scan for patches and inventory as the agent is not fully functional


You may encounter these problems if SEP does either of the following:

  • Blocks the file-copy functionality
  • Removes/blocks unknown .exe files from the computer by default


You are required to identify the cause for the problem you are facing and follow either one of the following solutions given below:

Enabling the functionality to copy files from a remote location

You should enable the file-copy functionality that is blocked by Symantec Endpoint Protection. This will enable you to copy the UEMS_agent.msi onto specific client computers.

 Adding .exe file names to the SEP exception list

You must add the following .exe file names to the exception list of Symantec Endpoint Protection, for the agent to be fully functional:

  • The following files located under <installation drive >\Program Files\DesktopCentral_Agent\bin directory:
    • dcagenttrayicon.exe
    • dcagentupgrader.exe
    • dc_cad.exe
    • dcagentservice.exe
    • dcusb32.exe
    • dcusb64.exe
    • dcinventory.exe
    • dcpatchscan.exe
    • dcrdservice.exe
    • dcstatusutil.exe 
    • dcuninstallsw.exe
    • dcrdsagentwindow.exe
    • cfgupdate.exe
    • checkVolume.exe
    • 7za.exe
    • dcconfigexec.exe
    • dcmsghandler.exe
    • gdiplus.dll
    • dcondemand.exe
    • dcswmeter.exe
    • agentupgrader.exe
    • dcchat.exe
    • dcusbsummary.exe
    • dcappcontrol.exe
    • selfserviceportal.exe
    • dcannouncement.exe
    • dcagentregister.exe
    • dcfilescan.exe
    • dcscreenrec.exe
    • dctask64.exe
    • dcupload.exe
    • dcwolsettings.exe
    • usbeDevicelist.exe
    • dcwol.exe
    • 7z.exe
    • agent_troubleshooting_tool.exe
    • AgentQPPMUpgrader.exe
    • dcagentregister.exe
    • DCFAService.exe
    • DCFA64Service.exe
    • DCFAUser.exe
    • dcfilesystem.exe
    • dcremregistry.exe
    • dctoolseventviewer.exe
    • DevExe32.exe
    • DevExe64.exe
    • drvforceupdate.exe
    • file_system_watcher.exe
    • folder_backup.exe
    • mdmregistrationhandler.exe
    • metroapps.exe
    • rdsrunasuser.exe
    • SecureDCProcess.exe
  • <installation drive >\Program Files\DesktopCentral_Agent\rds\dc_rds.exe
  • <installation drive >\Program Files\DesktopCentral_Agent\rds\FileTransfer\dcfiletransfer.exe
  • <installation drive >\Program Files\Desktopcentral_Agent\dcconfig.exe
  • <installation directory><installation drive >\Program Files\Desktopcentral_Agent\dcagent.dll
  • <installation directory><installation drive >\Program Files\Desktopcentral_Agent\DesktopCentralAgent.msi
  • <installation directory><installation drive >\Program Files\Desktopcentral_Agent\DesktopCentralAgent.mst
  • <installation directory><installation drive >\Program Files\Desktopcentral_Agent\AgentUpgrader.exe
  • <installation directory><installation drive >\Program Files\DownloadRepository
  • C:\Windows\System32\dclibxml2.dll - For 32-bit systems
  • C:\Windows\SysWOW64\dclibxml2.dll - For 64-bit systems
  • C:\Windows\System32\regsvr32.exe - For 32-bit systems
  • C:\Windows\Syswow64\regsvr32.exe - For 64-bit systems
  • C:\Windows\System32\dcagenthttp.dll - For 32-bit systems
  • C:\Windows\SysWOW64\dcagenthttp.dll - For 64-bit systems

On the computer where the product is installed, you should add dcnotificationserver.exe to the exceptions list

The following .exe file names should be added to the exception list of Symantec Endpoint Protection, for the Endpoint Central Distributional Server to be fully functional:

  • The following files located under <installation drive >\Program Files\\DesktopCentral_DistributionServer\bin directory:
    • dcagentupgrader.exe
    • dcdsinstallwizard.exe
    • dcdsservice.exe
    • dcreplication.exe
    • dc_httpd.exe
    • 7za.exe
    • ab.exe
    • abs.exe
    • AgentQPPMUpgrader.exe
    • ApacheMonitor.exe
    • dcdshttprequesthandler.exe
    • dcdsondemand.exe
    • dcdsservicerequesthandler.exe
    • dcupload.exe
    • ds_troubleshooting_tool.exe
    • dsAD.exe
    • htdbm.exe
    • htdigest.exe
    • htpasswd.exe
    • httxt2dbm.exe
    • logresolve.exe
    • RemCom.exe
    • rotatelogs.exe
    • wintty.exe
    • <installation directory><installation drive >\Program Files\DownloadRepository

Note: All the above mentioned files and folders are verified and signed by our organization. Excluding them from Antivirus won't be harmful. Excluding the specific .exe files is more complex because it keeps changing over a period of time. So folders can also be added to the exclusion list, so that the specified folders are not scanned. In such cases, ensure that you need to exclude the following folders respectively.

  • Agent computers - DesktopCentral_Agent
  • Endpoint Central Server - DesktopCentral_Server
  • Endpoint Central Distribution Server- DesktopCentral_DistributionServer

To know more about the steps to exclude the folder from Scan click here.

Applies to: Agent Installation, Compatible with Symantec Endpoint Protection

Keywords: Uninstall Agents, Agent Uninstallation, Endpoint Central Uninstallation