cancel
Showing results for 
Search instead for 
Did you mean: 
cdobol
Level 10
Report Inappropriate Content
Message 1 of 5

SafeBoot User Accounts Being Removed During Sync

I'm seeing a strange issue - I have already opened a SR with McAfee on this but I though I would post what I am seeing here.  Basically I am seeing the SafeBoot accounts being removed from a machine causing a lockout (yes, we use autoboot... no comments please ).  The machines can be recovered, then on the next sync the accounts are added back.  The machine was not touched in the SafeBoot database.  I have not seen this before.  We are using 5.2.5.  Any ideas why this may happen?

2011/08/23 10:43:42 Checking for machine configuration updates

2011/08/23 10:43:47 Checking for user updates

2011/08/23 10:43:50 Checking for token data updates

2011/08/23 10:43:50 Checking for SSO updates

2011/08/23 10:43:50 Checking for Local Recovery updates

2011/08/23 10:43:52 Checking for hashes updates

2011/08/23 10:43:52 Transferring local audit information to database

2011/08/23 10:43:52 Checking for file updates

2011/08/23 10:44:04 Applying configuration

2011/08/23 10:44:04 Synchronization complete

2011/08/23 10:44:04 Automatically synchronizing again in 120 minute(s)

2011/08/23 10:44:04 Applying cryption changes

2011/08/23 12:44:05 Starting synchronization

2011/08/23 12:44:05 SbFs total space = 20879360 bytes (19.91 MB)

2011/08/23 12:44:05 SbFs free space = 9807872 bytes (9.35 MB)

2011/08/23 12:44:05 Connecting to database: "XXXXXXX"

2011/08/23 12:44:05 Address=XXXXXXXXXXXXXXXX

2011/08/23 12:44:05 Port=5555

2011/08/23 12:44:05 Authenticate=Yes

2011/08/23 12:44:07 Checking pre-boot file system for errors

2011/08/23 12:44:07 Checking for machine configuration updates

2011/08/23 12:44:12 Checking for user updates

2011/08/23 12:44:15 Removing user (ID=00000549) Pilotadmin

2011/08/23 12:44:15 Removing user (ID=0000000f) $autoboot$

2011/08/23 12:44:15 Checking for token data updates

2011/08/23 12:44:15 Checking for SSO updates

2011/08/23 12:44:15 Checking for Local Recovery updates

2011/08/23 12:44:16 Synchronization complete

2011/08/23 12:44:16 Stopping remote access server

2011/08/23 12:44:16 Flushing pre-boot file system

2011/08/23 12:44:16 Unmounting pre-boot file system

2011/08/23 12:44:17 Successfully flushed pre-boot file system

2011/08/23 15:14:33 ------------------------------------------------------------------------------------------

2011/08/23 15:14:33 Starting Endpoint Encryption for PC Client Manager (v5.2.5)

2011/08/23 15:14:33 Starting remote access server on port 5556

2011/08/23 15:14:33 Delaying initial sync for 20 minutes

2011/08/23 15:14:33 Applying cryption changes

2011/08/23 15:16:10 Starting synchronization

2011/08/23 15:16:10 SbFs total space = 20879360 bytes (19.91 MB)

2011/08/23 15:16:10 SbFs free space = 9854976 bytes (9.40 MB)

2011/08/23 15:16:10 Connecting to database: "XXXXXXXXXX"

2011/08/23 15:16:10 Address=XXXXXXXXXXXXXXXXXXXX

2011/08/23 15:16:10 Port=5555

2011/08/23 15:16:10 Authenticate=Yes

2011/08/23 15:16:13 Checking pre-boot file system for errors

2011/08/23 15:16:14 Checking for machine configuration updates

2011/08/23 15:16:19 Checking for user updates

2011/08/23 15:16:26 Adding user (ID=0000000f) $autoboot$

2011/08/23 15:16:40 Adding user (ID=00000549) Pilotadmin

2011/08/23 15:16:49 Checking for token data updates

2011/08/23 15:16:50 Checking for SSO updates

2011/08/23 15:16:50 Updating local SSO info with database changes for user (ID=0000000f)

2011/08/23 15:16:51 Updating local SSO info with database changes for user (ID=00000549)

2011/08/23 15:16:51 Checking for Local Recovery updates

2011/08/23 15:16:53 Checking for hashes updates

2011/08/23 15:16:53 Transferring local audit information to database

2011/08/23 15:16:55 Checking for file updates

2011/08/23 15:17:06 Applying configuration

2011/08/23 15:17:06 Synchronization complete

4 Replies
Reliable Contributor SafeBoot
Reliable Contributor
Report Inappropriate Content
Message 2 of 5

Re: SafeBoot User Accounts Being Removed During Sync

I think it occurs during database timeouts on the 5.2.5 version - upgrade and you should find these supurious removals stop occuring. I've only seen it on very busy databases though, where people are using slow SAN storage, or have AV running on the db...

cdobol
Level 10
Report Inappropriate Content
Message 3 of 5

Re: SafeBoot User Accounts Being Removed During Sync

I can't go to 6.x right now - you believe going to 5.2.9 on the server end would help?  I can upgrade the server end, but upgrading the clients may take a while. Thanks for your response. 

Reliable Contributor SafeBoot
Reliable Contributor
Report Inappropriate Content
Message 4 of 5

Re: SafeBoot User Accounts Being Removed During Sync

I meant the latest version of 5 - yes I agree 6 is a big jump.

You'd need to migrate the endpoints though - I don't think a server migration would help here, other than you'd be more current as far as other resolved issues go.

Highlighted

Re: SafeBoot User Accounts Being Removed During Sync

We have 5.2.6 clients and server, and still see this, but very rarely. We're also taking advantage of multiple autoboot IDs, which prevents the helpdesk call. Yes, large database, although machine groups are limited to less than 500 machines, and five autoboot ids per group.

Want to Ask a Question?
Many members like to perform a search first in case other customers have already asked and answered a similar question. However, to ask a question, first select a forum then click on Post a Topic. You must sign in or log in with your existing credentials.

McAfee Service Portal customers please use your existing username and password to log into the community.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community