Endpoint Protection

All,

I retired my old SAVCE primary management server (PMS). I was able to move about 95% of my clients to the new PMS via the SSC, by drag-and-drop. I am now down to about 100 systems, that for whatever reason, I can not get moved this way. I really don't want to have to visit each of these systems, so I went searching for an alternative method. It appears that I can accomplish this task by pushing out a grc.dat file to the systems that need to be moved. Thus, I created a new grc.dat based off of a new system that has the new server as its PMS. I then pushed it to the target's "C:\Program Files\Symantec AntiVirus" directory (via PatchLink). All appears to have went well, but the systems are still showing up as being managed by the old server (it is still on-line and is acting as a secondary management server until I can get all of these clients moved). Does the grc.dat file need to be placed in a different directory and/or does something need to be run on the targets to get these new settings to take effect?

 

TIA,

Jon

BTW,

Here is the script that I am using to push the new grc.dat file to the target systems (the grc.dat file is dumped in the %TEMP% directory, and the script is run from that directory as well):

 

net stop "Symantec AntiVirus"
copy grc.dat C:\Program Files\Symantec AntiVirus /Y /V
del grc.dat
net start "Symantec AntiVirus"

are you using SAV9 or SAV10?

 

either way, its probably better to copy GRC.DAT to \Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5 then restart the Symantec AntiVirus service.

 

If you are using SAV10 then you need to make sure you either have no root certificate on your clients, or the one that matches the server group you are moving them to.

 

Check that the certificates in \\SAVServer\VPHOME\pki\roots match those in \Program Files\Symantec AntiVirus\pki\roots - if they don't then either copy the one from the server, or delete the one on the client and restart the SAV service.

 

hth

 

 

Thanks Paul,

I changed the copy location and also copied the certificate before resarting the service. This is now working perfectly!

 

Thanks Again,

Jon