Symantec Endpoint and Network Related Issues
Last night I received a complain from my customer saying that his Excahnge 2007 CCR cluster has failed on both the nodes. Upon troubleshooting I found that File Witness share was not access from both the nodes which made Exchange CCR go down. I checked all the permissons on the fileshare withness and they were Ok. Then I confirmed with the customer if he had lately installed patches or any applications on the Hub transport server where the File witness share was hosted and to my question he replied he has changed the Antivirus to Symantec EndPoint. I stopped the AV services restarted the Hub transport server and every thing Worked fine. After things went fine I started searcching Microsfot KB articles if any Symantec End Point related issues were published and to my eyes I found 4 KB articles which describes the problem.
· Error message: “The network path was not found” or “The specified network name is no longer available” when attempting to open shares, map a drive, run DCDIAG to the to the affected server, use netdom to reset secure channel
· Error message: “RPC Server is unavailable” when trying to connect via Active Directory Users and Computers
· Error message: “RPC Server is too busy to process the request” when attempting to join the Windows server domain
· Error message: “No network provider accepted the given network path” or “File or network path no longer exists” when copying a file over the network to affected servers
· Printing issues (cannot update printer IP address via DNS)
· AD replication failures
· Cluster service fails to start, or inability to access existing File Share resources even if they are online according to the Cluster Administrator snap-in
· Event log Event ID 4226 and or 2022 may occur frequently (up to every 20 to 30 seconds)
Related KB Articles
KB 961293 Unable to access Shares "The specified network name is no longer available" when Symantec Endpoint Protection prior to 11.0.4202 (MR4-MP2) or Symantec Antivirus 10.2 are installed on a Windows 2003, 2008 or 2008 R2 Server
KB 961654 A file sharing connection to a Windows Server 2008-based server drops unexpectedly if the server has Symantec Endpoint Protection prior to 11.0.4202 (MR4-MP2) or Symantec Antivirus 10.2 installed
KB 948732 Network shares become unresponsive after some time on a Windows Server 2003 or 2008 or 2008 R2-based-based computer running Symantec Endpoint Protection prior to 11.0.4202 (MR4-MP2) or Symantec Antivirus 10.2, and you receive an error message
KB 923360 You may experience various problems when you work with files over the network on a Windows Server 2003-based or Windows 2000 Server-based computer
Home