Endpoint Protection

How do I convert a SEP12 client from managed to unmanaged without reinstalling?

Thanks, but where do I place it? I placed it in the programdata\symantec..\data\config folder but it is still managed

You need to place the sylink file which is in the cd1\sep

Grab the Sylink file from Cd1\SEP folder ( what you have downloaded from fileconnect)

Replace this Sylink file with the existing one 

Start - run

smc -stop

Once tamper protection is disabled:

1. Stop the SMC service by going to Start > Run > type in > smc -stop.
2. Once the service is stopped copy the sylink.xml file from the new SEPM and on the client side put that sylink.xml file under

      "\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\<current_install_build_number>\Data\Config"

For Windows 7/2008/vista :

C:\Users\All Users\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Config

3. Replace the existing file and restart the SMC service with Start > Run > smc -start

How to change the sylink.xml file in Symantec Endpoint Protection (SEP) 12.1

http://www.symantec.com/docs/TECH157585

What is the location for Sylink.xml in Symantec Endpoint Protection 12.1?

http://www.symantec.com/docs/TECH165055

You need to place that file in 

      "\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\<current_install_build_number>\Data\Config"

For Windows 7/2008/vista :

C:\Users\All Users\Symantec\Symantec Endpoint Protection\SEP Version Number\Data\Config

3. Replace the existing file and restart the SMC service with Start > Run > smc -start

You need to disable tamper protection before replacing or stopping the smc service

On a side note, delete Sylink.bak Sylink.ex file before placing the sylink.xml file

t

See Brian Comments

https://www-secure.symantec.com/connect/forums/unmanaged-client-settings-grey-out#comment-8129621

Per this document, you need to set the client to Client Control mode before making it unmanaged:

https://www.symantec.com/business/support/index?pa...

If the communication mode was not set for Client Control in the Symantec Endpoint Protection Manager policies during initial installation, you will not be able to change the local client policies after placing the new Sylink.xml file on the client.

To set the client to Client Control

• Log in to the SEPM
• Click on the Clients page
• Select the group the client is in you want to make unmanaged
• Click the Policies tab
• Under Location-specific Policies and Settings, click the + next to Location-specific Settings
• Click Tasks next to Client User Interface Control Settings and select Edit Settings
• Select the option for Client Control
• Click OK

Make sure the policy update takes affect on the client. Once it does, you can than make the client unmanaged and you should than be able to change all the settings.

***Just a note*** Symantec does recommend just re-installing to ensure it is truly unmanaged. While the above works it can some times causes problems.

I have uninstalled the client and installed the unmanaged client from the CD. I can not change anything. It seems like there are settings\registry entries that stay on the machine after a uninstall.

I changed the client to client control, replaced the sylink with the unmanaged sylink, replaced the serdef.dat with the original file.

Nothing is working, I can not change settings on the unmanaged client, keeps telling me administrator locked it.

To regain control, I think you're going to have to replace the serdef.dat file on the machine with those from the original installation media too:

http://www.symantec.com/docs/TECH92877

if you open sep client, help  and support

troubleshooting 

does it say manged or unmanaged?

are you trying to edit Symantec registry values ? You should disable tamper protection before editing symantec keys