vea warning v-47-1-200

The problem: message v-47-1-200 comes up when you try to remove the last disk from a dynamic cluster volume group

The solution: offline the disk group from Microsoft fail over cluster, this will export the group in vea. once exported you can import the group again as a local dynamic group. You will then be able to remove that last disk.

Remove password from SEP when unknown or forgotten

Warning: This will leave your system unprotected and you could damage your system if you don’t know what you’re doing.

Note: If you system is managed by an IT department and you’re not in IT please seek their help with the problem you are facing. Dont put your company’s system at risk because you don’t like they way its setup. ONLY DO THESE STEPS IF YOU HAVE AUTHORIZATION TO DO SO.

Problem: What to do to upgrade/repair/fix setting on an install of Symantec Endpoint protection when the password is unknown/lost/forgotten.

Option 1: try default passwords

  • symantec
  • password
  • admin
  • norton
  • 12345
  • company name or stock symbol

Option 2: you could try sylinkdrop or SylinkReplacer to change the client from managed to unmanaged by replacing the sylink.xml to default, but you will most likely need the password as this step requires you to stop the service and will most likely be locked.

Option 3: Force the removal of the password.

    1. take backup of registry
    2. stop the SEP service, from services or command “start smc -stop”
    3. boot in to safemode (if step one fails)
    4. open regedit
    5. HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC
    6. delete key “SmcInstData” (this is where the password is keep, you cant delete if service is running)
    7. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SepMasterService (only if step 1 failed, this will disable your SEP service)
    8. Change Key “Start” to “3”
    9. reboot to normal windows
    10. uninstall/upgrade/repair your SEP or what ever else you needed to do. The password should be gone.

VERITAS Storage Foundations error V-76-58628-3

When tring to write a disk signiture to a new disk and you get error V-76-58628-3

If you click on the blue link in the error it will take you to symantec’s site and tell you to restart, well that did not work for me.

First look at your new disk and see if it looks like the below screenshot.

If your disk looks like the second one with a “blue i” then your disk is offline you need to online the disk to make it look like the top disk from the screenshot.

Then you should be able to write your disk signature after you online the disk.

Cannot Remote Desktop because windows logon software replaced

Error: You cannot initiate a remote desktop connection because the windows login software on the remote computer has been replaced by incompatible software c:\windows\system32\awgina.dll

Info:
OS= Windows 2003
PCA= version 10

Cause: PCA is a unsupported version for that version of OS, so the gina for PCA will not work with remote desktop

WARINING: Making Changes to your registry can destroy your OS, if you don’t know what your doing.

Fix #1 (This will stop PCA from working):

  1. Backup your registry
  2. START
  3. RUN
  4. regedit
  5. go to HKEY_LOCAL_MACHINE\software\Microsoft\windows nt\currentversion\winlogon
  6. key GinaDLL needs to point to msgina.dll instead of C:\windows\system32\awgina.dll
  7. reboot

Fix #2 (this will give your both PCA and RDP):

  1. Upgraded your version of PCA to a supported version

PCA= PC Anywhere
RDP= Remote Desktop Protocol