How to point clients to a new SEPM after decommissioning or replacing the primary SEPM.

Article:TECH92556  |  Created: 2009-01-24  |  Updated: 2012-06-21  |  Article URL
Article Type
Technical Solution



You have uninstalled or are planning to decommission or replace your existing primary (or only) Symantec Endpoint Protection Manager (SEPM) in your environment, and you would like to know the recommended method for getting existing Symantec Endpoint Protection (SEP) clients to report to the new SEPM.



There is more than one way to point a SEP client to a SEPM. Below, you will find three solutions that will point the client back to the SEPM. Choose the solution that is best for you.


Solution 1

Export a client install package with custom settings that specify removal of the previous client-server communication settings, and then deploy the package.

Create custom client install settings:

  1. Log on to the SEPM you wish to have manage the client.
  2. Click the Admin tab, then click Install Packages.
  3. Click Client Install Settings, then click Add Client Install Settings.... This will open the Add Client Install Settings dialog.
  4. At the bottom of the page under Upgrade Settings: select the setting Remove all previous logs and policies, and reset the client-server communications settings.
  5. Set all other options as desired.
  6. Click OK.

Export a client using the custom client install settings created above:

  1. Click the Admin tab, then click Install Packages.
  2. Click Client Install Packages, then click the package to be exported from the right-hand pane.
  3. Click Export Client Install Package....
  4. Ensure Pick the customized installation settings below: is set to the custom install settings created above.
  5. Set all other options as desired.
  6. Click OK to export the new package.
  7. Deploy this package by the desired method.

Note: This procedure will only overwrite the Sylink.xml on a previously new (not migrated from Symantec AntiVirus (SAV)) install of SEP. If the client was migrated from SAV, the old Sylink.xml will not be overwritten because the SEP files are located in Program Files\Symantec Antivirus not .Program Files\Symantec\Symantec Endpoint Protection.

Solution 2

Use the SylinkReplacer utility to replace Sylink.xml files in existing Symantec Endpoint Protection clients.

Note: The SylinkReplacer utility is only for use in Symantec Endpoint Protection environments. To obtain SylinkReplacer, contact Symantec Technical Support:

  1. Once you have obtained the utility via Support, expand the archive (zip) file to a convenient location, such as the Desktop.
    Note: This file is password protected. To unzip the file use the following password: symantec
  2. Follow the instructions provided in the SylinkReplacer PDF.
  3. Execute the tool by double clicking SylinkReplacer.exe and follow the on-screen instructions.

Please note that the DOS window should not be closed during any course of action while the tool is running.

Note: for SEP 12.1 environments, the SylinkReplacer Utility compatible with SEP 12.1 is required. It is also available from Support.

Solution 3

Copy the Sylink.xml manually to the SEP client.

The following instructions apply to SEP 11.x:

  1. While logged into the new SEPM, export communication settings for the group under which you want your clients to appear. See the link in Related Articles for detailed instructions.
  2. On the SEP client, click Start, then Run.
  3. Type: smc -stop
    (This will stop the Symantec Management Client service).
  4. Navigate to: C:\Program Files\Symantec\Symantec Endpoint Protection.
  5. Replace the new Sylink.xml with the original one in the C:\Program Files\Symantec\Symantec Endpoint Protection folder
  6. Click Start, then Run
  7. Type: smc -start
    (This will restart the service.)

The sylink.xml file can also be replaced using SylinkDrop, which is included with the SEP 11.x installation media (under \Tools\NoSupport\SylinkDrop).

For SEP 12.1, due to changes in Tamper Protection, it is recommended that you use the SylinkDrop included on the second installation download (Tools and Documents, \Tools\SylinkDrop), or by importing the sylink.xml directly into the SEP client GUI (Help > Troubleshooting > Management; under Communication Settings, click Import...).

After these steps are performed, you can log into the new Symantec Endpoint Protection Manager, navigate to the Clients tab, choose the target group then the Clients tab. The client (or clients) should begin to populate the group.

Note: If the client is in a different group than intended, just right-click on the client and choose Move, then choose the group in which you want the client to appear.


Legacy ID


Article URL

Terms of use for this information are found in Legal Notices