Endpoint Protection Manager sends 'Database down' alerts to the wrong email address
Last Updated April 30, 2018
The Symantec Endpoint Protection Manager (SEPM) sends an email notification to the default admin user's email address in the event of database failure. After changing the email address of the default admin user within the SEPM, these email alerts are still sent to the previous email address.
A 'database down' email is formatted as follows:
From: SEPM_Server@<domain> (In some cases the sender is SPC_Server@<domain> or a custom email address)
Subject: Database is down
Server Name: <Server Name>
Server IP: <Server IP Address>
The Symantec Endpoint Protection Manager database has gone down and needs immediate attention.
The SEPM caches the email address of the default admin user when the Symantec Endpoint Protection Manager service starts. The cache is not updated except by a service restart.
To update the cached default admin user account email address, restart the Symantec Endpoint Protection Manager service. After the service is restarted, subsequent email alerts will be sent to the new email address.
Imported Document ID: TECH177632
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe