1

Anyone out there run into this? :

Seeing Win7 Ent machines show black screen and go unresponsive when switching users or logging out while the SCEP client (Microsoft's AV client supplied with SCCM) is enabled. If I disable it, the issue goes away. Just started happening yesterday. Ran through Windows update reset, SFC, update troubleshooter, update readiness tool, updated latest to latest video card drivers, removed updates deployed in the last round, to no avail. Issue goes away in safe mode, but in clean boot with MS services running, it still happens, so 3rd party stuff ruled out.

Engaged MS support, waiting on a call.. just wanted to know if anyone has found an easy way to fix this

TIA

Shawn Keslar
  • 13
  • 3
  • Yes, we've been running into this exact same thing. Thought we were going crazy. seems to affect Microsoft the most. We've been uninstalling SCEP and replacing it with Cisco AMP since that was the plan. – montag Jul 09 '18 at 14:43

1 Answers1

0

use MpCmdRun.exe to remove definition (MpCmdRun.exe -RemoveDefinitions -All) and search new update definition, this solve the problem.

Fernando Elias Gutierrez
  • 16
  • 2
  • You, Sir, are the Hero of the Day ! – Shawn Keslar Jul 09 '18 at 01:50
  • also just received an email from MS support stating that av definitions version 1.271.632.0 is supposed to correct the issue; looks like another bad update. – Shawn Keslar Jul 09 '18 at 14:10
  • @ShawnKeslar can you confirm that 1.271.632.0 corrects the issue – montag Jul 09 '18 at 18:24
  • I did look at SCCM yesterday afternoon, and it looked like our endpoints were at or greater than that version. I haven't had any new reports, and I don't think we've had to manually flush any more SCEP agents, so it may be working. – Shawn Keslar Jul 10 '18 at 17:09