Several critical reasons explain this stance:
SEPM’s bundled JRE is not in the system PATH. Fix: Run from the exact bin folder, or set environment variable:
Use the cd command to navigate to the appropriate folder mentioned above. Type resetpass.bat and press .
| Installation Type | Path | |------------------|------| | 64-bit Windows default | C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\bin\ | | Custom installation | D:\SEPM\Symantec Endpoint Protection Manager\bin\ | | Older upgrade from 12.x | C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin\ |
Alex had been the IT administrator for a medium-sized company for three years. As part of his responsibilities, he managed the company's endpoint security using Symantec Endpoint Protection Manager (SEPM) 14. One day, he received a call from his colleague, Rachel, who was in charge of monitoring the security alerts. Rachel told Alex that she had forgotten her password to access the SEPM console and couldn't reset it herself. | Installation Type | Path | |------------------|------| |
While not recommended by Broadcom for newer versions, some administrators use the following script to reset the default admin account. Save the code below as resetpass.bat and place it in the folder of your SEPM installation.
: It requires local Windows Administrator privileges on the hosting server to execute successfully. Why You Should Never Download "resetpass.bat" Online
(Adjust the drive letter or path if you installed SEPM in a custom location). Step 4: Execute the Batch File Type the name of the script and press : resetpass.bat Use code with caution. Step 5: Complete the Reset Process
For embedded PostgreSQL or external MSSQL, a skilled DBA can manually update the USERS table to blank the password hash. This requires deep knowledge and is for production environments. Rachel told Alex that she had forgotten her
The script will reset the password for the primary account back to the default word: admin .
, as it is no longer distributed. While some administrators may attempt to recreate the script using older versions to reset credentials to admin / admin , this is not recommended. Broadcom Community
No. Clients communicate using agent-server certificates, not the admin password. Policy updates and heartbeat signals continue uninterrupted.
Allow the command prompt to run the background processes. It may take a couple of minutes to interface with your embedded database architecture. Clients communicate using agent-server certificates
: Configure SEPM to authenticate via your corporate Active Directory. This allows administrators to log in using their standard domain credentials, shifting password recovery management to your standard corporate identity provider.
Since the batch file is missing from version 14, administrators have several alternative paths for credential recovery: Console Reset: Forgot your password?
Navigate to the bin folder:
. They can provide internal tools or guidance to reset the password, as these resources are no longer publicly distributed. techdocs.broadcom.com Unofficial "resetpass.bat" for SEPM 14 (Manual Creation)