Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

MoveClient Script

Created: 05 Jul 2013 • Updated: 08 Jul 2013 | 9 comments
RSASKA's picture
+8 8 Votes
Login to vote

I created a MoveClient Script using powershell.

There are actually two scripts

1 - get_group_IDs.ps1 generates a list of groups, along with their group ID to help you create an input file (based on your environment)

2 - Moveclient.ps1 is the actual script that takes the input file you created, and prompts you for information about your database

The script does the following:

1. gets a list of all SEP clients in your SEPM. Depending on the number of clients in your SEPM, and the amount of operations taking place in your SEPM at a particular time, this reading of IP address can take a minute, or even an hour, so be patient!

2. for each SEP client, goes through the input file to see if the SEP client's IP address fits in a particular IP range. If it fits, the group ID is updated, otherwise, it is not moved. And when I tested this, I noticed that going through 3,000 clients takes about an hour. Your timing may be different.

3. generates an output file, clients_that_have_been_moved.txt that indicates which clients were moved, which were not

And because this script prompts for database information, such as database schema, you may need help from your Database Administrator.

This script is different from the last script because you had to move ALL SEP clients to Default Group before the script would move it. If you work with 100,000 SEP clients, spread throughout 200 groups, and are not sure whether they belong in the right group or not, well, it can drive anyone battycheeky

Please read the instructions - it is mostly screenshots, and I believe it is quite straightforward

This was tested numerous times on SEP 11 and SEP 12 Management Console. However, it is always safe to back up your database.

This community has been a great help to me in managing SEP, and I really hope this Moveclient script helps you all.

Comments 9 CommentsJump to latest comment

.Brian's picture

Looks promising. Will try out in my test environment. Thanks much for the share.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

+1
Login to vote
RSASKA's picture

Hey let me know how it works out for you!

The Enemy's greatest fear is that you'll discover who you really are, what you're really worth, and where you're headed.

0
Login to vote
Kedarnath Lal's picture

Thank you.

Wonderful.

+1
Login to vote
security_admin's picture

Hi RsaSka,

This script available on Symantec tool (No support folder in Vers. 11)
 
But it’s good for new user keep it up yes
 
+2
Login to vote
sai_india's picture

Hi RsaSka,

This nice script yaar,

+1
Login to vote
ScottM 2's picture

Ok, something to think about using the moveclients.vbs script. We ran into a problem where, because the script ran for several minutes, there was a conflict generated by a moved client checking in during the move process. The result was client records corrupted causing the client to revert to the group they are initially registered to via the client installation.

A work around is to down the SEMSRV service on your managers while running the script, that way there is no conflict condition. If I can clean it up I'll post the script I use to run the move script.

0
Login to vote
nwranich's picture

Is this script much different than the MoveClient script that was included in older SEP version?  We use this to move clients from the default group and it works well.

0
Login to vote
RSASKA's picture

This script is different in that clients can be included in any group, you don't have to move them to Default Group.

Plus, the code is written in Powershell :-)

The Enemy's greatest fear is that you'll discover who you really are, what you're really worth, and where you're headed.

0
Login to vote
Elisha's picture

The MoveClient.vbs script that is included on the SEP DVD can move clients from any group, not just the default group.  There is an option called "OnlyCheckClientsInTempGroup" that can be set to allow the script to move clients from and to any group.

The MoveClient tool that comes with SEP also allows you to move clients between domains.  See attached documentation for more details.

AttachmentSize
MoveClients.pdf 473.06 KB
0
Login to vote