Endpoint Protection

 View Only
  • 1.  change of management server

    Posted Nov 24, 2009 10:31 AM
    I have a number of clients with managed Endpoint protection installed.  Is there a way to change the management server on the client without access to the old management server?  All the procedures I find is through the old management server.  Is it possible to avoid reinstalling the client software?

  • 2.  RE: change of management server

    Posted Nov 24, 2009 10:39 AM
     You need sylinkreplacer to replacer sylink.xml file on all the computers remotely.
    Once new sylink will be replaced on these computers they will start communicating with new Management server.


  • 3.  RE: change of management server

    Posted Nov 24, 2009 10:42 AM
    yes that is possible .Just Replce the sylink ans the client will report  to the new SEPM. there is no need to install SEP client


    Title: 'How to restore/retain client-server communication using custom installation settings without having to use the sylink drop tool.'
    Document ID: 2008052008163148
    > Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008052008163148?Open&seg=ent


    Title: 'Moving clients from site to site without manually replacing the Sylink.xml'
    Document ID: 2009093012465148
    > Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2009093012465148?Open&seg=ent

  • 4.  RE: change of management server

    Posted Nov 24, 2009 10:48 AM
    1. In Windows Explorer on the computer that runs Symantec Endpoint Protection Manager, browse to C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agent\.
      In this location, there are two or more folders with 32-character alphanumeric names. Each folder represents a group in your Symantec Endpoint Protection Manager site. Inside of each folder is a file named LSProfile.xml.
      Do not edit LSProfile.xml. Any edits to the LSProfile.xml file is not recommended or supported, and can cause serious communication problems.
    2. Open the LSProfile.xml file in one of the group folders, and find the XML tag: <GroupInfo Name="X" where X is the name of the group.
    3. Find which LSProfile.xml file specifies "MyCompany" as the group name.
      The folder that contains that file is the folder that represents the MyCompany group.
    4. In the Mycompany group folder there is a file named Sylink.xml. Make a copy of that file
    5. Use the sylink remote tool to push the sylink file to the clients from here.

  • 5.  RE: change of management server

    Posted Dec 01, 2009 11:51 AM
    I may be missing this, but what is the manual procedure for moving the xml file if I know which file I need on the client?

  • 6.  RE: change of management server
    Best Answer

    Posted Dec 01, 2009 12:24 PM
    Either pickup a sylink.xml from a working client's directory
    C:\Program Files\Symantec\Symantec Endpoint Protection\Sylink.xml

    or from the SEPM -go to Clients-highlight the targer group for which you need sylink -click on Details

    the you will see policy serial number
    note the 1st 4 digits for Pol. Serial no.
    then go to 
     C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agent\
    open the folder which start with number of Policy serial number and take the sylink.xml from that directory.

    ON the target computer
    go to start - run -smc -stop
    paste the sylink.xml file to 
    C:\Program Files\Symantec\Symantec Endpoint Protection\
    then again go to start - run - smc -start
    client will show up or follow this doc

  • 7.  RE: change of management server

    Posted Dec 01, 2009 01:39 PM
    Worked like a charm.  Thanks.