Hi,
We do have cases from time to time related to this Issue but the reason could be different for each scenario so opening TAC case will be the best for us to Investigate. The most common are due to resources.
After Windows Updates -- > Restarts -- >Windows Processes may not be ready in time which causes the Secure Endpoint Service to fail. This can happen to other services as well. This can also happen due to all the services trying to start around the same time and causing resources to be busy causing some services not to be able to start correctly.
Unfortunately we don’t have a more solid work-around as this is an issue with Microsoft Windows, not so much with Cisco Secure Endpoint. This can affect many services not just Secure Endpoint.
Due to the Service not crashing but timing out, the service doesn't recover on its own and stays stuck in the "Stopped" State.
Delayed start is sometimes a resolution, when it’s not we can also utilize this method:
Configure Scheduled Tasks to listen to Event ID: 7009 and then try to restart the service using a PowerShell script such as this one bellow. Please note that this is not officially supported by Cisco so test first.
#Requires -RunAsAdministrator
Write-Host "Checking status of Secure Endpoint services"
function CheckAndFixService
{
Param(
[string]$serviceName = $(throw "Please specify a service name, -service")
)
$retryCount = 0
$stopLoop = $false
$GrabbedService = Get-Service -name $serviceName
if($GrabbedService.Status -eq "Running"){
Write-Host "$serviceName already started"
}
while($GrabbedService.Status -ne "Running" -or $stopLoop -eq $true){
try{
Start-Service $serviceName
Write-Host "Attempting to start $serviceName service"
Start-Sleep -seconds 5
$GrabbedService.Refresh()
if($GrabbedService.Status -eq "Running"){
Write-Host "$serviceName started successfully"
}
} catch{
if($retryCount -gt 12){
Write-Host "Could not start $serviceName"
$stopLoop = $true
}
}
}
}
CheckAndFixService "CiscoSCMS"
CheckAndFixService "CiscoAMP"
Write-Host "All Cisco Secure Endpoint services started"
Regards,
Roman
