Non-Persistent VDI's stuck in Remediation Status pending in SCEP

Currently have 2 VDI's stuck in a remediation state - pending. The action required states Endpoint Protection Pending Reboot.

Since these are non-persistent devices the virus has been removed after a restart as they are back to a clean image however SCCM/SCEP does not seem to recognise the restart state. 

How can I clear this so that the clients report back as re mediated? Note I have run a full scan and restarted the devices.


December 18th, 2013 12:58pm

Hi,

Please examine ExternalEventAgent.log on the client to see whether the state messages have been forwarded successfully.

And check EPCtrlMgr.log on the site system server that records details about the synchronization of malware threat information from the Endpoint Protection role server into the Configuration Manager database.

Best Regards,

Joyce Li

Free Windows Admin Tool Kit Click here and download it now
December 20th, 2013 5:18am

Checked the ExternalEventAgent.log and the following is reported.

Sent 1 state messages successfully and skipped 0 input entries.

EPCtrlMgr.log is reporting synced threats

synced 169010 threats

however status of the VDI is still pending reboot. 



December 30th, 2013 4:52pm

Yes, I know this is an old post, have you figure this out yet, if so what was the issue?

Free Windows Admin Tool Kit Click here and download it now
January 18th, 2014 8:04am

Not yet. Still stuck pending reboot
January 18th, 2014 12:25pm

Not yet. Still stuck pending reboot

 


Then at this point I suggest contact CSS for support.
Free Windows Admin Tool Kit Click here and download it now
January 19th, 2014 11:35am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics