Endpoint Protection

Hi People,

How can I pick certain server based on VLAN or IP subnet entry to be inserted/move into certain group and also how to differentiate between workstation type eg. Desktop and Laptop ?

I need to do this so that I can segregate the SEPM hierarchy properly.

Thanks. 

you need to create agroup ( logically defined) and put those machines to the group so that it is ease for administratative.

Check this thread

https://www-secure.symantec.com/connect/forums/sepm-121-1

Best Practices for Creating Client Group Structure

http://www.symantec.com/business/support/index?page=content&id=TECH134409

Yes I know that I must create a group, but how to migrate from the old group ?

the old group is not properly structured, so I need to see the IP address and also computer type if possible (Desktop / Laptop).

for ip address, go to clients view tab. However it is not possible to distinguish if it is laptop or server. If you have defined naming convention for systems which are laptop and desktop then sort by the computer name.

HI,

Have you apply any Naming Convention policy apply for system ?

If yes you can sort by name if no it's not possible.

Naming Convention policy --> do you mean my server naming convention ?

Yes I got it named as PRODserver1 TESTserver1 DEVserver1 and so on, but for the workstations, it is just WKS001, WKS002, WKS999 and so on, there is noo differentiation between desktop and laptop :-|

the laptop will be equipped with SNAC component while the desktop is not because I don't know what the effect will be if I implement SNAC to desktop :-|

:-), yeah. like servers starting with prod and laptop with LP & workstation WS

HI John,

Do you have all Laptop Host name ?

If yes you can use MoveClient.vbs script for laptop one group to new group

Hello,

You could find MoveClient.vbs for SEP 12.1 under the Tools DVD -

Symantec_Endpoint_Protection_12.1_Tools_and_Documents_EN.exe

Once, you extract the contents of the DVD, you would see under - ...\Tools\NoSupport\MoveClient

Also, check this Article:

Understanding the Downloads of Symantec Endpoint Protection (SEP) 12.1 available on Symantec FileConnect website.

Agree with the above comment. searching them with the name using "like" or "=" and moving them is what you can do. You cannot search using an IP range :(

ok, so in this case, I shall highlight the result and then right click on it and then MOVE to the new group right ?

Yes, this would be the correct way, unless you have AD sync on, in which case you would need to move in AD.

hi John,

Unless if you having host name of all laptop you can move to MoveClient.vbs script.

Otherwise you will configure AD sync with SEPM .

Many thanks all for the confirmation !