After we patched our server SEP Anti-Virus to version 14.3.9210.6000, all last stopped bigfix task suddenly it status turn to open after server rebooted, have anyone encounter this before?
Was the action Stopped (which can only be done at the console),or was it “Fixed/Completed/Not Relevant/Pending Restart”?
The latter is the more likely case. If the action was had Retry or Reapply options set to run again after a reboot that could explain what you see.
the task was at a complete stopped, it was stopped many months back.
An action that has been Stopped or Expired at the server cannot be reopened or reactivated.
I can only think of a couple of situations where the client could run the action again…
-
The client has not gathered updates from the Server since the action was stopped, so the client doesn’t know the action was ever stopped. Check the BESClient log on the endpoint for gather errors.
-
The client was restored from a backup or rolled back on a VM Snapshot from before the client gathered the stopped action, and ran the action again before gathering the site update that stopped the action.
If you want to investigate further I think you’d need to open a support ticket and upload your client logs and screenshots of the action configuration (showing the action ID, time issued, time stopped, etc.)