4 Replies Latest reply on Aug 24, 2011 6:56 AM by rbarstow

    SafeBoot User Accounts Being Removed During Sync

    cdobol

      I'm seeing a strange issue - I have already opened a SR with McAfee on this but I though I would post what I am seeing here.  Basically I am seeing the SafeBoot accounts being removed from a machine causing a lockout (yes, we use autoboot... no comments please ).  The machines can be recovered, then on the next sync the accounts are added back.  The machine was not touched in the SafeBoot database.  I have not seen this before.  We are using 5.2.5.  Any ideas why this may happen?

       

      2011/08/23 10:43:42 Checking for machine configuration updates

      2011/08/23 10:43:47 Checking for user updates

      2011/08/23 10:43:50 Checking for token data updates

      2011/08/23 10:43:50 Checking for SSO updates

      2011/08/23 10:43:50 Checking for Local Recovery updates

      2011/08/23 10:43:52 Checking for hashes updates

      2011/08/23 10:43:52 Transferring local audit information to database

      2011/08/23 10:43:52 Checking for file updates

      2011/08/23 10:44:04 Applying configuration

      2011/08/23 10:44:04 Synchronization complete

      2011/08/23 10:44:04 Automatically synchronizing again in 120 minute(s)

      2011/08/23 10:44:04 Applying cryption changes

      2011/08/23 12:44:05 Starting synchronization

      2011/08/23 12:44:05 SbFs total space = 20879360 bytes (19.91 MB)

      2011/08/23 12:44:05 SbFs free space = 9807872 bytes (9.35 MB)

      2011/08/23 12:44:05 Connecting to database: "XXXXXXX"

      2011/08/23 12:44:05 Address=XXXXXXXXXXXXXXXX

      2011/08/23 12:44:05 Port=5555

      2011/08/23 12:44:05 Authenticate=Yes

      2011/08/23 12:44:07 Checking pre-boot file system for errors

      2011/08/23 12:44:07 Checking for machine configuration updates

      2011/08/23 12:44:12 Checking for user updates

      2011/08/23 12:44:15 Removing user (ID=00000549) Pilotadmin

      2011/08/23 12:44:15 Removing user (ID=0000000f) $autoboot$

      2011/08/23 12:44:15 Checking for token data updates

      2011/08/23 12:44:15 Checking for SSO updates

      2011/08/23 12:44:15 Checking for Local Recovery updates

      2011/08/23 12:44:16 Synchronization complete

      2011/08/23 12:44:16 Stopping remote access server

      2011/08/23 12:44:16 Flushing pre-boot file system

      2011/08/23 12:44:16 Unmounting pre-boot file system

      2011/08/23 12:44:17 Successfully flushed pre-boot file system

      2011/08/23 15:14:33 ------------------------------------------------------------------------------- -----------

      2011/08/23 15:14:33 Starting Endpoint Encryption for PC Client Manager (v5.2.5)

      2011/08/23 15:14:33 Starting remote access server on port 5556

      2011/08/23 15:14:33 Delaying initial sync for 20 minutes

      2011/08/23 15:14:33 Applying cryption changes

      2011/08/23 15:16:10 Starting synchronization

      2011/08/23 15:16:10 SbFs total space = 20879360 bytes (19.91 MB)

      2011/08/23 15:16:10 SbFs free space = 9854976 bytes (9.40 MB)

      2011/08/23 15:16:10 Connecting to database: "XXXXXXXXXX"

      2011/08/23 15:16:10 Address=XXXXXXXXXXXXXXXXXXXX

      2011/08/23 15:16:10 Port=5555

      2011/08/23 15:16:10 Authenticate=Yes

      2011/08/23 15:16:13 Checking pre-boot file system for errors

      2011/08/23 15:16:14 Checking for machine configuration updates

      2011/08/23 15:16:19 Checking for user updates

      2011/08/23 15:16:26 Adding user (ID=0000000f) $autoboot$

      2011/08/23 15:16:40 Adding user (ID=00000549) Pilotadmin

      2011/08/23 15:16:49 Checking for token data updates

      2011/08/23 15:16:50 Checking for SSO updates

      2011/08/23 15:16:50 Updating local SSO info with database changes for user (ID=0000000f)

      2011/08/23 15:16:51 Updating local SSO info with database changes for user (ID=00000549)

      2011/08/23 15:16:51 Checking for Local Recovery updates

      2011/08/23 15:16:53 Checking for hashes updates

      2011/08/23 15:16:53 Transferring local audit information to database

      2011/08/23 15:16:55 Checking for file updates

      2011/08/23 15:17:06 Applying configuration

      2011/08/23 15:17:06 Synchronization complete