7 Replies Latest reply on Nov 14, 2014 4:45 PM by Scott Sadlocha

    Active Directory synchronization task not finishing / terminated get stuck in "pending termination" state

    dominikk

      After the upgrade to ePO 5.1 I cannot get this one to working. Seems lots of issues combined cause following

       

      When the Active Directory tasks is run it tries to synchronize groups. I one of the steps server log shows: Started: Deploy McAfee Agent. And that's all. Task never finish.

       

      Then the scheduler runs the AD server task at given time and it gets stuck (two tasks at the same time so obvious probably). When trying to terminate task gets stuck in "pending termination" state.

       

      I'm with the support team for 3-4 months now and still without soultion.

       

      I assume this may be realted to problems with deploying agent (I know there are some issues with that in the latest ePO). If it cannot get through it does not expire/terminate itself automatically.

       

      Has anyone have/had such issue?

       

      Thanks in advance.

       

      Message was edited by: dominikk on 4/23/14 10:42:37 AM GMT+01:00
        • 2. Re: Active Directory synchronization task not finishing / terminated get stuck in "pending termination" state
          dominikk

          Hello Hem,

           

          I have already done that... nearly 3 months ago. Just thought that there is someone with similiar issue and had implemented succesfully any type of workaround.

          • 4. Re: Active Directory synchronization task not finishing / terminated get stuck in "pending termination" state
            M Bagheryan M

            We had a similar issue before and as far as I remember we just did verify our db and firewall setting to solve it.

             

            Actually this issue is coming from upgrading process at first you have to check your steps during upgrade.

             

            Here is the acceptable method for this:

             

            Use the following steps to perform a side-by-side upgrade of ePO:

            1. Install a different ePO version on the target ePO server.
            2. Export the following configuration information from the source ePO server:
              • System Tree:
                1. Log on to the source ePO server.
                2. Click System Tree from the toolbar on the top.
                3. Click System Tree Actions, Export Systems, and save the file.
              • Policies and Policy Assignments:
                1. Click Menu, System Tree, Assigned Policies.
                2. Click Actions, Export All Assignments.
                3. Click Download and save the file.
              • Client Tasks and Assignments:
                1. Click Menu, System Tree, Assigned Client Tasks.
                2. Click Actions, Export All Assignments.
                3. Click Download and save the file.
              • Server Tasks:
                1. Click Menu, Automation, Server Tasks.
                2. Click Select All.
                3. Click Actions, Export Tasks.
                4. Click Download and save the file.
              • Automatic Responses:
                1. Click Menu, Automation, Automatic Responses.
                2. Click Select All.
                3. Click Actions, Export Responses.
                4. Click Download and save the file.
              • Rogue System Detection (RSD):
                1. Back up the RSD server settings:
                  1. Log on to the ePO console.
                  2. Click Menu, Configuration, Server Settings.
                  3. Make a note of any custom configuration in the following categories:
                    • Detected System Compliance
                    • Detected System Exception Categories
                    • Detected System Matching
                    • Detected System OUIs
                    • Rogue System Sensor
                2. Export the RSD exceptions:
                  1. Log on to the ePO console.
                  2. Click Menu, Systems, Detected Systems.
                  3. Click Import/Export Exceptions under the Overall System Status dashboard header.
                  4. Click the Export Exceptions tab, then click here to download exceptions entry.
                  5. Click Save and save the file.
                    NOTE: Exporting Exceptions does not export Exception Categories. You have to manually recreate Exception Categories after reinstalling the RSD extension.

                3. Export the RSD blacklist:
                  1. Log on to the ePO console.
                  2. Click Menu, Systems, Detected Systems.
                  3. Click View Blacklist under the Rogue System Sensor Status dashboard header.
                  4. Click Actions, Rogue Sensor, Export Blacklist.
                  5. Click Save and save the file.
              • Security Keys:
                1. Click Menu, Configuration, Server Settings.
                2. Click Security Keys, Edit.
                3. Click Back Up All, type a password (optional), click OK, and save the file.
              • Any Custom Reports:
                1. Click Menu, Reporting, Queries and Reports.
                2. Select the query.
                3. Click Actions, Export Definitions.
                4. Click Download and save the file.
              • Export any other Point Product specific settings.

            3. Import the configuration information into the target ePO server:
              • System Tree:
                1. Log on to the target ePO server.
                2. Click Menu, System Tree, New Systems.
                3. Import systems into the current group (My Organization), but do not push agents. Select the file to import and click OK.
              • Policies and Policy Assignments:
                1. Click Menu, System Tree, Assigned Policies.
                2. Click Actions, Import Assignments.
                3. Select the file to import.
                4. Leave all product policies to import selected, leave all policy assignments selected, and click OK.
              • Client Tasks and Assignments:
                1. Click Menu, System Tree, Assigned Client Tasks.
                2. Click Actions, Import Assignments.
                3. Select the file to import.
                4. Leave all product tasks to import selected, leave all task assignments selected, and click OK.
              • Server Tasks:
                1. Click Menu, Automation, Server Tasks.
                2. Click Actions, Import Tasks.
                3. Select the file to import, click Import All, and click OK.
              • Automatic Responses:
                1. Click Menu, Automation, Server Tasks.
                2. Click Actions, Import Responses.
                3. Select the file to import, click Import All, and click OK.
              • Rogue System Detection (RSD):
                1. Import the RSD exceptions:
                  1. Log on to the ePO console.
                  2. Click Menu, Systems, Detected Systems.
                  3. Click Import/Export Exceptions under the Overall System Status dashboard header.
                  4. Select By File and select the file to import.
                  5. Click Import Exceptions.
                2. Import the RSD blacklist:
                  1. Log on to the ePO console.
                  2. Click Menu, Systems, Detected Systems.
                  3. Click View Blacklist on the Rogue System Sensor Status page.
                  4. Click Actions, Rogue Sensor, Import Blacklist.
                  5. Select Import file with list of systems to add to the Sensor Blacklist.
                  6. Select the file to import.
                  7. Click Import.
              • Security Keys:
                1. Click Menu, Configuration, Server Settings.
                2. Click Security Keys, Edit.
                3. Click Restore All, select the file to import, type the password (if previously specified), and click OK.
              • Any Custom Reports:
                1. Click Menu, Reporting, Queries and Reports.
                2. Click Actions, Import Definitions.
                3. Select the file to import and click Save.

            4. Point existing clients to the new target ePO server:
              1. Log on to the source ePO server.
              2. Click Menu, Configuration, Agent Handlers.
              3. Click Handler Status, Agent Handlers.
              4. Select the target ePO server.
              5. Type the target ePO server FQDN in Published DNS Name.
              6. Type the target ePO server IP address in Published IP Address.

            Systems should now communicate with the target ePO server:

            • When clients communicate with the source ePO server, they will get a new SiteList.xml with a new published DNS name and IP address that point to the target ePO server.
            • At the next communication after receiving the new SiteList.xml, clients will use this information to communicate with the target ePO server and communication will be successful because of the import of the agent-to-server communication keys from source ePO server to the target ePO server.
            • 5. Re: Active Directory synchronization task not finishing / terminated get stuck in "pending termination" state
              Scott Sadlocha

              Upgraded to ePO 5.1.1 recently, and I am seeing the exact same thing. I have tried the first two steps in the KB with no success. My AD sync is not running. The strange thing is, before I restarted services, I terminated the task and it was pending termination. Once the services restarted, the old task started running again. I terminated it again, and it is now pending termination again. This is very frustrating.

               

              Another item to note is that this did not start directly after the ePO upgrade. The task ran for several days successfully, and then had issues a couple days later.

              • 6. Re: Active Directory synchronization task not finishing / terminated get stuck in "pending termination" state
                JoeBidgood

                Please see this thread:

                 

                ePO 5.1.1 server tasks don't expire as configured

                 

                The last few posts contain a workaround which is in the process of being published.

                 

                HTH -

                 

                Joe

                • 7. Re: Active Directory synchronization task not finishing / terminated get stuck in "pending termination" state
                  Scott Sadlocha

                  Joe,

                  Thanks a ton. I followed the post, and just completed the third step in the KB article. I did need to do a restart of services, but my tasks seem to be working without issue now. As always, your expertise is greatly appreciated.

                   

                  Best Regards,

                  Scott