This is a follow-up on my previous topic - https://community.mcafee.com/message/173247#173247
Unfortunately, I started celebrating too early. While removing the unmanaged entry from ePO the remote client would appear once the agent had been woken up, I've found that less than a minute later they have disappeared from ePO again.
As a recap from the previous topic, this is a fresh ePO 4.5 install on a server which uses the same name as the server it replaces. The keys were not ported, the DB was not migrated, McAfee 4.0 agents (which have been kept patched) were deployed fresh to all machines using the force install setting. We deploy agents using a domain admin account used for no other purpose, all deployments report successful and we have verified with the timestamp on the FramePkg.exe on machines that they are receiving the file.
To clarify the issue now experienced:
1. Delete unmanaged entry in ePO
2. Use psexec to force wakeup on remote agent at 0833 - psexec \\machinename -u domain\user "c:\program files\mcafee\common framework\cmdagent.exe" /p /e /c - finishes with error code 0
3. Verify that agent has added the system to ePO. It is listed as managed with a full set of properties.
4. Within five minutes a search for the system turns up no results.
What on earth?
I've noticed than when it is visible my systems are reporting 556 are compliant and 1 is non-compliant. Once it disappears from search my report shows 557 systems compliant. I exported the results and found that the rogue system disappears and is replaced with a different system which moves into the compliant area. A few minutes later this system disappears (cannot be found in a search) and the one I woke-up reappears as non-compliant and is discoverable via search.
So far as I can tell systems are appearing in ePO when they talk to the ePO server, but then disappear a minute or two later. This is leading to what look like stable compliance stats, but in reality a number of those systems appear to be ones which are trading places, appearing and disappearing.
Below is the log of the system I was working during the wake-up and reporting. The log here ends at 0835 and the next entry isn't until 0838 (Agent enforcing policies) by which point it was no longer visible in ePO (I checked at 0837)
2011-02-04 08:33:17 i #2800 Agent Agent Started Enforcing policies
2011-02-04 08:33:17 I #2800 Agent Thread signal occurred
2011-02-04 08:33:17 I #2800 Manage Enforcing policies
2011-02-04 08:33:18 i #3544 Agent Agent started performing ASCI
2011-02-04 08:33:18 I #3544 Agent Collecting Properties
2011-02-04 08:33:18 I #3544 Agent Collecting IP address using Internet Manager
2011-02-04 08:33:18 I #3544 naInet HTTP Session initialized
2011-02-04 08:33:18 I #3544 imsite Connecting to server: 100.100.0.248 on port: 81
2011-02-04 08:33:18 i #2800 Manage Enforcing Policies for EPOAGENT3000META
2011-02-04 08:33:18 I #3544 naInet HTTP Session closed
2011-02-04 08:33:18 I #3544 Manage Collecting Properties
2011-02-04 08:33:18 i #2800 Manage Enforcing Policies for EPOAGENT3000
2011-02-04 08:33:18 i #2800 Manage Enforcing Policies for McAfee Agent
2011-02-04 08:33:18 i #3544 Manage Collecting Properties
2011-02-04 08:33:18 I #2800 Agent CePOAgent::EnforcePolicy priority=-2
2011-02-04 08:33:18 I #2800 Agent Enforcing policies
2011-02-04 08:33:18 I #2800 LstnSvr Enforcing Policies
2011-02-04 08:33:18 I #2800 Logging Enforcing policies
2011-02-04 08:33:18 I #2800 Manage Enforcing policies
2011-02-04 08:33:18 I #2800 UsrSpCt Enforcing policies
2011-02-04 08:33:18 I #3544 Agent Agent is sending properties version to the ePO Server
2011-02-04 08:33:19 i #3544 Agent Agent started performing ASCI
2011-02-04 08:33:19 I #2388 Agent Started processing a package..
2011-02-04 08:33:19 I #3544 Agent Agent is sending properties version to the ePO Server
2011-02-04 08:33:19 I #2800 Sched >>--CSchedule::EnforcePolicy
2011-02-04 08:33:19 I #2388 Agent Preparing Props Version Package
2011-02-04 08:33:19 I #2800 Sched >>--CSchedule::ModifyTask
2011-02-04 08:33:19 I #2800 Sched <<--CSchedule::ModifyTask
2011-02-04 08:33:19 I #2800 Sched Product Updates - Last run time(local) is Fri Feb 04 08:26:00 2011
2011-02-04 08:33:19 I #2800 Sched
2011-02-04 08:33:19 I #2800 Sched 0 fields of the task 129 are updated successfully
2011-02-04 08:33:19 I #2800 Sched RunAtEnforcementEnabled not found in the task settings
2011-02-04 08:33:19 I #2800 Sched >>--CSchedule::ModifyTask
2011-02-04 08:33:19 I #2800 Sched <<--CSchedule::ModifyTask
2011-02-04 08:33:19 I #2388 SpiPkgr Using sequence number 11570
2011-02-04 08:33:19 i #2388 Agent Agent communication session started
2011-02-04 08:33:19 i #2388 Agent Agent is sending PROPS VERSION package to ePO server
2011-02-04 08:33:19 i #2388 Agent Agent is connecting to ePO server
2011-02-04 08:33:19 I #2388 naInet HTTP Session initialized
2011-02-04 08:33:19 I #2388 imsite Upload from: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412819990140000_29087.spkg
2011-02-04 08:33:19 I #2388 imsite Upload response target: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412819994830000_10896.spkg
2011-02-04 08:33:19 I #2388 naInet Uploading file C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412819990140000_29087.spkg to ePO Server...
2011-02-04 08:33:19 I #2388 naInet Connecting to Real Server: 100.100.0.248 on port: 81
2011-02-04 08:33:19 I #2388 naInet Connected to ePO Server: 100.100.0.248
2011-02-04 08:33:19 I #2388 naInet Uploading SPIPE HTTP header
2011-02-04 08:33:19 I #2388 naInet Uploading data in bytes: 934
2011-02-04 08:33:19 I #2388 naInet Reading acknowledgement from ePO Server
2011-02-04 08:33:19 I #2800 Sched Deploy McAfee Agent Updates - Last run time(local) is Tue Sep 28 12:15:06 2010
2011-02-04 08:33:19 I #2800 Sched
2011-02-04 08:33:19 I #2800 Sched 0 fields of the task 131 are updated successfully
2011-02-04 08:33:19 I #2800 Sched >>--CSchedule::ModifyTask
2011-02-04 08:33:20 I #2800 Sched <<--CSchedule::ModifyTask
2011-02-04 08:33:20 I #2388 naInet Authentication successful: HTTP/1.1 200 OK
2011-02-04 08:33:20 I #2388 naInet
2011-02-04 08:33:20 I #2388 naInet Received response [200 OK] from ePO Server
2011-02-04 08:33:20 I #2388 naInet Receiving a package ePO Server
2011-02-04 08:33:20 I #2388 naInet Uploaded file : C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412819990140000_29087.spkg to Server successfully
2011-02-04 08:33:20 I #2388 naInet HTTP Session closed
2011-02-04 08:33:20 i #2388 Agent Package uploaded to ePO Server successfully
2011-02-04 08:33:20 i #2388 Agent Agent communication session closed
2011-02-04 08:33:20 i #2388 Agent Agent received REQUEST PUBLIC KEY package from ePO server
2011-02-04 08:33:20 I #2388 Agent Started processing a package..
2011-02-04 08:33:20 I #2388 Manage Collecting Properties
2011-02-04 08:33:20 I #2388 Manage CEnforceProperties::LoadPropFiles() - Properties file not found, creating new
2011-02-04 08:33:20 i #2388 Manage Collecting Properties
2011-02-04 08:33:20 I #2388 Agent Preparing Agent Key Package
2011-02-04 08:33:20 I #2388 Agent Getting IP address for public key from Internet Manager
2011-02-04 08:33:20 I #2388 naInet HTTP Session initialized
2011-02-04 08:33:20 I #2388 imsite Connecting to server: 100.100.0.248 on port: 81
2011-02-04 08:33:20 I #2800 Sched Deploy McAfee VirusScan - Last run time(local) is Fri Feb 04 08:31:42 2011
2011-02-04 08:33:20 I #2800 Sched
2011-02-04 08:33:20 I #2800 Sched 0 fields of the task 133 are updated successfully
2011-02-04 08:33:20 I #2388 naInet HTTP Session closed
2011-02-04 08:33:20 I #1772 Sched Deploy McAfee VirusScan - Last run time is : not run yet
2011-02-04 08:33:20 i #1772 Sched Added a new task Deploy McAfee VirusScan to Scheduler's task list
2011-02-04 08:33:20 I #2800 Sched >>--CSchedule::GetTask
2011-02-04 08:33:20 I #2800 Sched <<--CSchedule::GetTask
2011-02-04 08:33:20 I #2800 Sched >>--CSchedule::GetTask
2011-02-04 08:33:20 I #2800 Sched <<--CSchedule::GetTask
2011-02-04 08:33:20 I #2800 Sched >>--CSchedule::GetTask
2011-02-04 08:33:20 I #2800 Sched <<--CSchedule::GetTask
2011-02-04 08:33:20 I #2800 Sched <<--CSchedule::EnforcePolicy
2011-02-04 08:33:20 i #2800 Agent Agent finished Enforcing policies
2011-02-04 08:33:20 i #2800 Agent Next policy enforcement in 5 minutes
2011-02-04 08:33:20 I #2388 SpiPkgr Using sequence number 11571
2011-02-04 08:33:20 i #2388 Agent Agent communication session started
2011-02-04 08:33:20 I #2388 Agent Package type is AgentPubKey
2011-02-04 08:33:20 i #2388 Agent Agent is connecting to ePO server
2011-02-04 08:33:20 I #2388 naInet HTTP Session initialized
2011-02-04 08:33:20 I #2388 imsite Upload from: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820001080000_13431.spkg
2011-02-04 08:33:20 I #2388 imsite Upload response target: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820009200000_10938.spkg
2011-02-04 08:33:20 I #2388 naInet Uploading file C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820001080000_13431.spkg to ePO Server...
2011-02-04 08:33:20 I #2388 naInet Connecting to Real Server: 100.100.0.248 on port: 81
2011-02-04 08:33:20 I #2388 naInet Connected to ePO Server: 100.100.0.248
2011-02-04 08:33:20 I #2388 naInet Uploading SPIPE HTTP header
2011-02-04 08:33:20 I #2388 naInet Uploading data in bytes: 2662
2011-02-04 08:33:20 I #2388 naInet Reading acknowledgement from ePO Server
2011-02-04 08:33:21 i #924 Sched Scheduler: Invoking task [Deploy McAfee VirusScan]...
2011-02-04 08:33:21 I #5120 Sched >>--RunTask
2011-02-04 08:33:21 I #5120 Manage Running task SoftwareID:EPOAGENT3000, TaskID:133
2011-02-04 08:33:21 I #2808 FrmSvc User SID is S-1-5-18 and SessionID is 0
2011-02-04 08:33:21 i #2808 Script The deployment task will be re-tried in 5 minutes because Updater is in progress.
2011-02-04 08:33:21 I #5120 Sched <<--RunTask
2011-02-04 08:33:21 I #924 Sched Deploy McAfee VirusScan lCookie == NULL, Scheduler won't take care this task
2011-02-04 08:33:21 I #924 Sched Deploy McAfee VirusScan - Last run time(local) is Fri Feb 04 08:33:21 2011
2011-02-04 08:33:21 I #924 Sched
2011-02-04 08:33:21 I #924 Sched End of invoking the task
2011-02-04 08:33:22 I #2388 naInet No package to receive from ePO Server, HTTP return code: HTTP/1.1 202 OK
2011-02-04 08:33:22 I #2388 naInet
2011-02-04 08:33:22 I #2388 naInet Received response [202 OK] from ePO Server
2011-02-04 08:33:22 I #2388 naihttp client:no package to receive
2011-02-04 08:33:22 I #2388 naInet Uploaded file : C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820001080000_13431.spkg to Server successfully
2011-02-04 08:33:22 I #2388 imsite NaInet library returned code == 13
2011-02-04 08:33:22 I #2388 naInet HTTP Session closed
2011-02-04 08:33:22 i #2388 Agent No package received from ePO Server
2011-02-04 08:33:22 i #2388 Agent Agent communication session closed
2011-02-04 08:33:22 I #2388 Agent Started processing a package..
2011-02-04 08:33:22 I #2388 Agent Preparing Props Version Package
2011-02-04 08:33:22 I #2388 SpiPkgr Using sequence number 11572
2011-02-04 08:33:22 i #2388 Agent Agent communication session started
2011-02-04 08:33:22 i #2388 Agent Agent is sending PROPS VERSION package to ePO server
2011-02-04 08:33:22 i #2388 Agent Agent is connecting to ePO server
2011-02-04 08:33:22 I #2388 naInet HTTP Session initialized
2011-02-04 08:33:22 I #2388 imsite Upload from: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820024990000_24482.spkg
2011-02-04 08:33:22 I #2388 imsite Upload response target: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820028420000_9876.spkg
2011-02-04 08:33:22 I #2388 naInet Uploading file C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820024990000_24482.spkg to ePO Server...
2011-02-04 08:33:22 I #2388 naInet Connecting to Real Server: 100.100.0.248 on port: 81
2011-02-04 08:33:22 I #2388 naInet Connected to ePO Server: 100.100.0.248
2011-02-04 08:33:22 I #2388 naInet Uploading SPIPE HTTP header
2011-02-04 08:33:22 I #2388 naInet Uploading data in bytes: 918
2011-02-04 08:33:22 I #2388 naInet Reading acknowledgement from ePO Server
2011-02-04 08:33:23 I #2388 naInet Authentication successful: HTTP/1.1 200 OK
2011-02-04 08:33:23 I #2388 naInet
2011-02-04 08:33:23 I #2388 naInet Received response [200 OK] from ePO Server
2011-02-04 08:33:23 I #2388 naInet Receiving a package ePO Server
2011-02-04 08:33:23 I #2388 naInet Uploaded file : C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820024990000_24482.spkg to Server successfully
2011-02-04 08:33:23 I #2388 naInet HTTP Session closed
2011-02-04 08:33:23 i #2388 Agent Package uploaded to ePO Server successfully
2011-02-04 08:33:23 i #2388 Agent Agent communication session closed
2011-02-04 08:33:23 i #2388 Agent Agent received REQUEST PROPS package from ePO server
2011-02-04 08:33:23 I #2388 Agent Started processing a package..
2011-02-04 08:33:23 I #2388 Agent Preparing Props Package
2011-02-04 08:33:23 I #2388 SpiPkgr Using sequence number 11573
2011-02-04 08:33:23 i #2388 Agent Agent communication session started
2011-02-04 08:33:23 i #2388 Agent Agent is sending INC PROPS package to ePO server
2011-02-04 08:33:23 i #2388 Agent Agent is connecting to ePO server
2011-02-04 08:33:23 I #2388 naInet HTTP Session initialized
2011-02-04 08:33:23 I #2388 imsite Upload from: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820033270000_699.spkg
2011-02-04 08:33:23 I #2388 imsite Upload response target: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820036860000_26046.spkg
2011-02-04 08:33:23 I #2388 naInet Uploading file C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820033270000_699.spkg to ePO Server...
2011-02-04 08:33:23 I #2388 naInet Connecting to Real Server: 100.100.0.248 on port: 81
2011-02-04 08:33:23 I #2388 naInet Connected to ePO Server: 100.100.0.248
2011-02-04 08:33:23 I #2388 naInet Uploading SPIPE HTTP header
2011-02-04 08:33:23 I #2388 naInet Uploading data in bytes: 2054
2011-02-04 08:33:23 I #2388 naInet Reading acknowledgement from ePO Server
2011-02-04 08:33:24 I #2388 naInet No package to receive from ePO Server, HTTP return code: HTTP/1.1 202 OK
2011-02-04 08:33:24 I #2388 naInet
2011-02-04 08:33:24 I #2388 naInet Received response [202 OK] from ePO Server
2011-02-04 08:33:24 I #2388 naihttp client:no package to receive
2011-02-04 08:33:24 I #2388 naInet Uploaded file : C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820033270000_699.spkg to Server successfully
2011-02-04 08:33:25 I #2388 imsite NaInet library returned code == 13
2011-02-04 08:33:25 I #2388 naInet HTTP Session closed
2011-02-04 08:33:25 i #2388 Agent No package received from ePO Server
2011-02-04 08:33:25 i #2388 Agent Agent communication session closed
2011-02-04 08:33:25 I #2388 Agent Agent communication failed, result=-44
2011-02-04 08:33:53 I #4516 Uec Received ipc data from mue
2011-02-04 08:33:53 I #4516 Uec Processing progress information
2011-02-04 08:33:53 i #4516 Updater Backing up file(s) Engine DAT
2011-02-04 08:33:53 I #4516 Uec Done processing progress information
2011-02-04 08:34:01 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:01 I #4516 Uec Processing progress information
2011-02-04 08:34:01 i #4516 Updater Pre-notifying for DAT update.
2011-02-04 08:34:01 I #4516 Uec Done processing progress information
2011-02-04 08:34:01 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:01 I #4516 Uec Processing progress information
2011-02-04 08:34:01 i #4516 Updater Copying DAT.
2011-02-04 08:34:01 I #4516 Uec Done processing progress information
2011-02-04 08:34:07 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:07 I #4516 Uec Processing event information
2011-02-04 08:34:07 I #4516 UpdEvents Generating update event:EventId=2401:Severity=4:ProductId=VIRUSCAN8700:Locale=0000:UpdateType=DAT:UpdateError=0:NewVersion=6246.0000:DateTime=02032011
2011-02-04 08:34:07 I #4516 UpdEvents EpoEventInf Interface: Event element created.
2011-02-04 08:34:07 I #4516 Uec Done processing event information
2011-02-04 08:34:07 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:07 I #4516 Uec Processing progress information
2011-02-04 08:34:07 i #4516 Updater Update succeeded to version 6246.0000.
2011-02-04 08:34:07 I #4516 Uec Done processing progress information
2011-02-04 08:34:07 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:07 I #4516 Uec Processing progress information
2011-02-04 08:34:07 i #4516 Updater Post-notifying for DAT update.
2011-02-04 08:34:07 I #4516 Uec Done processing progress information
2011-02-04 08:34:34 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:34 I #4516 Uec Processing event information
2011-02-04 08:34:34 I #4516 Uec Done processing event information
2011-02-04 08:34:34 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:34 I #4516 Uec Processing progress information
2011-02-04 08:34:34 i #4516 Updater Verifying AgtMetaDet.McS.
2011-02-04 08:34:34 I #4516 Uec Done processing progress information
2011-02-04 08:34:34 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:34 I #4516 Uec Processing progress information
2011-02-04 08:34:34 i #4516 Updater Searching available updates for McAfee Agent Plugin.
2011-02-04 08:34:34 I #4516 Uec Done processing progress information
2011-02-04 08:34:34 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:34 I #4516 Uec Processing progress information
2011-02-04 08:34:34 i #4516 Updater Product(s) running the latest Plugin.
2011-02-04 08:34:34 I #4516 Uec Done processing progress information
2011-02-04 08:34:34 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:34 I #4516 Uec Processing progress information
2011-02-04 08:34:34 i #4516 Updater Verifying VSE870Det.McS.
2011-02-04 08:34:34 I #4516 Uec Done processing progress information
2011-02-04 08:34:34 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:34 I #4516 Uec Processing progress information
2011-02-04 08:34:34 i #4516 Updater Verifying VSE850Det.McS.
2011-02-04 08:34:34 I #4516 Uec Done processing progress information
2011-02-04 08:34:34 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:34 I #4516 Uec Processing progress information
2011-02-04 08:34:34 i #4516 Updater Verifying BocDet_VSE.McS.
2011-02-04 08:34:34 I #4516 Uec Done processing progress information
2011-02-04 08:34:35 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:35 I #4516 Uec Processing progress information
2011-02-04 08:34:35 i #4516 Updater Searching available updates for BOC DAT.
2011-02-04 08:34:35 I #4516 Uec Done processing progress information
2011-02-04 08:34:35 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:35 I #4516 Uec Processing progress information
2011-02-04 08:34:35 i #4516 Updater Product(s) running the latest BOC DAT.
2011-02-04 08:34:35 I #4516 Uec Done processing progress information
2011-02-04 08:34:35 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:35 I #4516 Uec Processing progress information
2011-02-04 08:34:35 i #4516 Updater Verifying VSE880Det.McS.
2011-02-04 08:34:35 I #4516 Uec Done processing progress information
2011-02-04 08:34:35 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:35 I #4516 Uec Processing progress information
2011-02-04 08:34:35 i #4516 Updater Verifying ePOMVTDetect.McS.
2011-02-04 08:34:35 I #4516 Uec Done processing progress information
2011-02-04 08:34:37 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:37 I #4516 Uec Processing progress information
2011-02-04 08:34:37 i #4516 Updater Update Finished
2011-02-04 08:34:37 I #4516 Uec Done processing progress information
2011-02-04 08:34:37 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:37 I #4516 Uec Processing EndUpdateDialog information
2011-02-04 08:34:37 I #4516 Uec Done processing EndUpdateDialog information
2011-02-04 08:34:37 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:37 I #4516 Uec Processing EndUpdateDialog information
2011-02-04 08:34:37 I #4516 Uec Done processing EndUpdateDialog information
2011-02-04 08:34:37 I #4516 Uec Received ipc data from mue
2011-02-04 08:34:37 I #4516 Uec Processing event information
2011-02-04 08:34:37 I #4516 muemsg Calling HandlePostpone with TaskID: UpdateState: 1
2011-02-04 08:34:37 I #4516 muemsg Calling m_pUpdateInfoCallback->HandlePostpone
2011-02-04 08:34:37 I #4516 Updater CMcAfeeUpdate::HandlePostpone() Entered taskid: 129
2011-02-04 08:34:37 I #4516 Updater Finished calling GetPostponeMins
2011-02-04 08:34:37 I #4516 Updater CMcAfeeUpdate::HandlePostpone() Exit
2011-02-04 08:34:37 I #4516 muemsg Finished Calling m_pUpdateInfoCallback->HandlePostpone
2011-02-04 08:34:37 I #4516 muemsg Finished Calling HandlePostpone
2011-02-04 08:34:37 I #4516 UpdEvents EpoEventInf Interface: Update event created.
2011-02-04 08:34:37 I #4516 UpdEvents DeInitializing Event Interface
2011-02-04 08:34:37 I #4516 UpdEvents EpoEventInf Interface: Deinitialization succeeded.
2011-02-04 08:34:37 I #4516 muemsg Updater session finish state value =1
2011-02-04 08:34:37 I #4516 Uec Done processing event information
2011-02-04 08:34:37 I #4516 Uec Terminating thread
2011-02-04 08:34:38 I #6004 Uec Terminating ipc channel
2011-02-04 08:34:38 I #6004 ipcchannel Aborting IPC object connection
2011-02-04 08:34:38 I #6004 ipcchannel Closing IPC connection
2011-02-04 08:34:38 I #2808 FrmSvc User SID is S-1-5-18 and SessionID is 0
2011-02-04 08:34:38 i #1772 Sched The task Product Updates is successful
2011-02-04 08:34:38 i #1772 Sched Scheduler: Task [Product Updates] is finished
2011-02-04 08:34:38 I #1772 Sched >>--ReleaseTask
2011-02-04 08:34:38 I #1772 Manage Releasing Task Cookie=19255304
2011-02-04 08:34:38 I #1772 Sched <<--ReleaseTask
2011-02-04 08:35:52 I #2604 Agent Sending the next batch of immediate events
2011-02-04 08:35:52 i #2604 Agent Agent is looking for events to upload
2011-02-04 08:35:52 I #2604 Agent Agent did not find any events to upload
2011-02-04 08:35:52 I #2604 Agent Agent did not find any events to upload
2011-02-04 08:35:52 i #2604 Agent Agent uploading 1 events to ePO Server
2011-02-04 08:35:52 I #2388 Agent Started processing a package..
2011-02-04 08:35:52 I #2388 SpiPkgr Using sequence number 11574
2011-02-04 08:35:52 i #2388 Agent Agent communication session started
2011-02-04 08:35:52 i #2388 Agent Agent is sending EVENT package to ePO server
2011-02-04 08:35:52 i #2388 Agent Agent is connecting to ePO server
2011-02-04 08:35:52 I #2388 naInet HTTP Session initialized
2011-02-04 08:35:52 I #2388 imsite Upload from: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412821524180000_8783.spkg
2011-02-04 08:35:52 I #2388 imsite Upload response target: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412821524340000_23163.spkg
2011-02-04 08:35:52 I #2388 naInet Uploading file C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412821524180000_8783.spkg to ePO Server...
2011-02-04 08:35:52 I #2388 naInet Connecting to Real Server: 100.100.0.248 on port: 81
2011-02-04 08:35:52 I #2388 naInet Connected to ePO Server: 100.100.0.248
2011-02-04 08:35:52 I #2388 naInet Uploading SPIPE HTTP header
2011-02-04 08:35:52 I #2388 naInet Uploading data in bytes: 1086
2011-02-04 08:35:52 I #2388 naInet Reading acknowledgement from ePO Server
2011-02-04 08:35:52 I #2388 naInet No package to receive from ePO Server, HTTP return code: HTTP/1.1 202 OK
2011-02-04 08:35:52 I #2388 naInet
2011-02-04 08:35:52 I #2388 naInet Received response [202 OK] from ePO Server
2011-02-04 08:35:52 I #2388 naihttp client:no package to receive
2011-02-04 08:35:52 I #2388 naInet Uploaded file : C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412821524180000_8783.spkg to Server successfully
2011-02-04 08:35:52 I #2388 imsite NaInet library returned code == 13
2011-02-04 08:35:52 I #2388 naInet HTTP Session closed
2011-02-04 08:35:52 i #2388 Agent No package received from ePO Server
2011-02-04 08:35:52 i #2388 Agent Agent communication session closed
Message was edited by: Quitch on 04/02/11 09:16:04 GMTSolved! Go to Solution.
The behaviour you describe sounds like a duplicate GUID problem. Repeat your test so that the machine appears in ePO again: go into the properties for the machine and make a note of its GUID.
Then when it disappears again, search for the GUID in the Quick Search dashboard - don't include the curly brackets.
Is a different machine found?
HTH -
Joe
I had a similar thought to you and have been looking into that very idea. I've got the weekly ePO GUID duplication tasks setup (both clear non-reoccuring errors and remove high error systems), so this shouldn't be an issue I hope. To test I connected to the registry of the machine and deleted its GUID, restarted the framework service and then forced a wakeup. It's still not listed.
I've now tried the steps you provided. Is there a way to get GUID from the machine properties? I didn't see it so I connected to the machine's registry and got it from there. No other machine was found in a search (I excluded the brackets). No sequence errors were shown in the machine properties when I viewed it, though I don't know how quickly it would get them.
You can get the guid from the agent properties if you click on the "More" link to give you the detailed properties for the agent
One other thought - are these machines connecting via VPN?
Thanks -
Joe
The ones I've been testing on are, yes. There are rogues in other subnets, but the VPN ones crop up much more often so I have used them.
That looks to have done the trick. Thanks.
Corporate Headquarters
6220 America Center Drive
San Jose, CA 95002 USA