{"id":8659,"date":"2015-04-23T14:34:14","date_gmt":"2015-04-23T06:34:14","guid":{"rendered":"http:\/\/w3c.weblink.com.tw\/symantec\/?p=8659"},"modified":"2015-04-23T15:48:12","modified_gmt":"2015-04-23T07:48:12","slug":"sep-%e5%ae%89%e8%a3%9d%e6%88%96%e5%8d%87%e7%b4%9a%e8%87%b3-12-1-5%ef%bc%88ru5%ef%bc%89%e5%be%8c%ef%bc%8c%e5%85%a7%e5%b5%8c%e8%b3%87%e6%96%99%e5%ba%ab%e7%84%a1%e6%b3%95%e5%95%9f%e5%8b%95","status":"publish","type":"post","link":"https:\/\/w3c.weblink.com.tw\/symantec\/?p=8659","title":{"rendered":"SEP \u5b89\u88dd\u6216\u5347\u7d1a\u81f3 12.1.5\uff08RU5\uff09\u5f8c\uff0c\u5167\u5d4c\u8cc7\u6599\u5eab\u7121\u6cd5\u555f\u52d5"},"content":{"rendered":"
\u932f\u8aa4\u8a0a\u606f<\/h5>\n

In the Windows event log: <\/p>\n

SQLANYs_sem5
Can’t open Message window log file: D:\\Program Files (x86)\\Symantec\\Symantec Endpoint Protection Manager\\db\\out.log <\/p>\n

In the Upgrade-0.log: <\/p>\n

The service SQLANYs_sem5 failed to be started. <\/p>\n

In the Management Server Upgrade Wizard: <\/p>\n

Setting
ACL…(100%)…Done
Error occurred <\/p>\n

Cause<\/h5>\n

\u5728 SEP 12.1.5 (RU5), Symantec changed the SemSrv and SemWebSrv services to use service virtual accounts. These services are set to an UNRESTRICTED SID type, but the SQLANYs_sem5 service remains under the RESTRICTED category. <\/p>\n

Solution<\/h5>\n

Use the following workaround to change the SID type to UNRESTRICTED, since we are using a service virtual account for the Symantec Embedded Database service as well. <\/p>\n

Check the SID type of the service<\/h5>\n
    \n
  1. On the computer where SEPM is installed, click Start <\/strong>> Run<\/strong>.\n
  2. Type CMD and click OK<\/strong>.\n
  3. Type sc qsidtype SQLANYs_sem5\n
  4. Verify that the following is returned:
    [SC] QueryServiceConfig2 SUCCESS
    SERVICE_NAME: SQLANYs_sem5
    SERVICE_SID_TYPE: RESTRICTED<\/li>\n<\/ol>\n

    \"image\"<\/a><\/p>\n

    Change the SID type of the SQLANYs_sem5 service to UNRESTRICTED<\/h5>\n
      \n
    1. On the computer where SEPM is installed, click Start<\/strong> > Run<\/strong>.\n
    2. Type CMD and click OK<\/strong>.\n
    3. Type cd “<Drive>:\\Program Files (x86)\\Symantec\\Symantec Endpoint Protection Manager\\bin”
      Note:<\/strong> Replace <Drive> with the drive that SEPM is installed on.\n
    4. Type ServiceUtil.exe -changeservicesidtype 1 -servicename “SQLANYs_sem5”
      Note:<\/strong> Running the command returns: “Change the semsrv service SID successfully.” The string “semsrv” is hardcoded, but we are changing the SID type for the SQLANYs_sem5 service. Please disregard that message.<\/li>\n<\/ol>\n

      \"image\"<\/a><\/p>\n

      Verify that the SID type has changed to UNRESTRICTED<\/h5>\n
        \n
      1. On the computer where SEPM is installed, click Start<\/strong> > Run<\/strong>.\n
      2. Type CMD and click OK<\/strong>.\n
      3. Type sc qsidtype SQLANYs_sem5<\/li>\n<\/ol>\n

        \"image\"<\/a><\/p>\n

        Start services<\/h5>\n

        After following the preceding steps, start the following services: <\/p>\n