The root cause is that something inside the Quest software is not allowing SEP to get a lock on the definfo.dat file in order to successfully update the content.
Suggestion is to disable or uninstall Quest ChangeAuditor application from the affected system. If disabling or uninstalling this application resolves the issue, Quest or Dell should be involved for further investigation.
Below steps can be followed to disable a File Driver that the Change Auditor (CA) Agent uses: 1. If you have removed the agent redeploy the agent. 2. Navigate to the location where the CA Agent is installed C:\Program Files\Quest Software\ChangeAuditor\Agent 3. Double click on ServiceStatusTray.exe 4. Go to the System tray and right click on the Agent icon, then left click on Agent Status 5. Once the Agent status dialog box is up press Alt-M 6. This brings up another dialog box, go to the File Server tab and towards the bottom disable File driver - change the value to 1.
Windows 2008 R2 Server Standard Service Pack 1 and Windows 2012 server.