Video Screencast Help

How to run the SYLINK REMOTE to Replace the Sylink Remotely

Created: 28 Jul 2009 • Updated: 24 Aug 2009 | 13 comments
Language Translations
P_K_'s picture
+13 13 Votes
Login to vote

Sylink.xml is the file that is used for communication from SEPM to SEP Clients .

There are 4 different ways in which Sylink.xml file can be replaced on a Client.

1. Manually Replacing the Sylink
2. Sylink drop ( From CD2)
3. Sylink Replacer
4. Sylink Remote

Out of these 4 Sylink Replacer and Remote can be used to replace the sylink on more than one machine at the same time.
If we have a list of IP address/ Host name on which we have to replace the sylink replacer will be handy else it will take a lot of time to search the network for the Clients. In simple words Sylink replacer takes a lot of time .

Sylink remote works instanatlly. The moment the wizard finishes the Client is online in SEPM.

Note : When Sylink Remote runs the Client sees a DOS screen for a fraction of seconds.

How to run the SYLINK REMOTE to Replace the Sylink Remotely .

Steps to Replace the Sylink are as follows :

1. Copy of the file Sylink.xml for the desired group from the server from C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agent\

2. Put Sylink.xml in the folder "SYLINKREMOTE" with SETUP.EXE and SCRIPT.BAT

3. Start the Migration and Deployment Wizard from the Windows Start menu.

4. In the Welcome panel, click Next.

5. Click Deploy the client (Symantec Endpoint Protection only), and then click  Next.

6. Click Select an existing client install package to deploy, and then click Finish.

7. In the Push Deployment Wizard panel, click Browse, navigate to and select the SYLINKREMOTE_ENG and then click OK.

8. Approve or modify the maximum number of concurrent deployments, and then click Next.

9. In the Select Computers panel, in the left pane under Available Computers, expand the trees and select the computers on which to install the client software, and then click Add.

10. In the Remote Client Authentication dialog box, type a user name and
password that can authenticate to the Windows Domain or Workgroup that contains the computers, and then click OK.

This will work when there is no password for stopping the smc service

If there is a password to stop the service in that case we need to modify the script .

So in the SYLINKREMOTE" folder do a right click on SCRIPT.BAT and click EDIT

In the note pad identify the following line
"%programfiles%\symantec\symantec endpoint protection\smc.exe" –stop

Add -p password after " –stop where password will be the password to stop the service.

So the statement will look like this
"%programfiles%\symantec\symantec endpoint protection\smc.exe" –stop – p ********

Once this done follow the steps as mentioned above.

Comments 13 CommentsJump to latest comment

bfordz's picture

I obviously didn't do enough research on "How" to replace the Sylink file.
I found how to do it using the Sylink Drop from the CD or manually. Fortunately I don't have a large environment to update.
I do have more to do so I am keeping (printing) your instructions for future use.

Again Thank You,

Login to vote
mkwygant's picture

I used a script that I created by exporting the domain computers as an input file for a psexec routine.  You can see it in detail here: 

Login to vote
Bowpro's picture

Silly question.
"2. Put Sylink.xml in the folder "SYLINKREMOTE" with SETUP.EXE and SCRIPT.BAT"

Where is SETUP.EXE and SCRIPT.BAT located? We do not have Endpoint on CD as it was a download from the INFOSEC DoD site.

The replacer tool will not work for us as we are not a domain and there is no domain admin group. What other options do I have?

Login to vote
BaezH's picture

I have the full installation disks and there is no SylinkRemote or SylinkReplacer or similar. Only SylinkDrop.exe

Where is this supposed to be obtained from, Symantec Support?


Login to vote
P_K_'s picture

yes , But you can also download them from the Forums itself





/* Style Definitions */
{mso-style-name:"Table Normal";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-fareast-font-family:"Times New Roman";
mso-bidi-font-family:"Times New Roman";

MCT MCSE-2012 Symantec Technical Specialist (SCTS)

Login to vote
steffen910's picture

thanks good information it really helps

Login to vote
David Lowry's picture

Just wanted to add my thanks as this has helped me also.  Nice work! yes

Login to vote
Candi's picture

I wanted to know if there was a way to stop the sylink remote from asking password, i found this and this is simply cool.. thank u...

Login to vote
karinjo's picture

how this work on sep12 ?

does anybody know ?

Login to vote
P_K_'s picture

I have not tried this , but I am sure it would work.

MCT MCSE-2012 Symantec Technical Specialist (SCTS)

Login to vote
karinjo's picture

please, how to do remotely sylink drop on client computers with SEPM 12?

I cannot do that with these four solutions above 

I have some managed client computers (managed with old manager sepm11), and I want to replace them into new manager sepm12. How to do that, remotly, from sepm12 server?

p.s. client computers are windows xp x86, windows7 x86 and windows7 x64

Login to vote
Gurupreet's picture

Sylink Remote tool is no more available for support. Refer to

With current version of SEP, Sylink replacer and Sylink Drop are the 2 tools available and supported to replace sylink on one or more computers locally or remotely.

There are seperate Sylink replacer tools for SEP 11.x and SEP 12.x. Contact support to have these tools accordingly.


Login to vote