Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

How do you normally let the client showing in the SEPM console if no one logs onto a computer yet?

Updated: 21 May 2010 | 10 comments
mssym's picture
0 0 Votes
Login to vote

If you use third party to deploy SEP client, such as SMS, SCCM, the client will not appear in the SEPM console untill a user log onto the computer, does anyone try any methods to have the client showing in the console before someone log onto the computer?

Comments

sandip_sali's picture
23
Jun
2009
0 Votes 0
Login to vote

Client and SEPM Console

Hi,

        There is a method for the client to register with the SEPM console so that it can be seen. The below link explains it in detail. Please go through it and let us know in case you require further assistance.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008123014151248

Thanks & Regards Sandip C Sali

bjohn's picture
23
Jun
2009
0 Votes 0
Login to vote

I deploy using SMS and the

I deploy using SMS and the client DOES show in the symantec console even if the user hasn't logged on?

Daniel_Allen's picture
23
Jun
2009
0 Votes 0
Login to vote

Altiris

We use Altiris (now owned by Symantec but we've got a 'pre-Symantec' version).  The machines show up fine in the console no user logged in. 

mssym's picture
23
Jun
2009
0 Votes 0
Login to vote

which mode do you guys choose?

I guess it does not matter what distribution software we choose to deploy SEP 11.0 client, either SCCM, SMS or Altiris, My package was configured with USER Mode im un-managed group, at the endof instalaltion, I used MSI transform to launch sylinkdrop to drop a managed group sylink.xml on the machine, I was assuming that client should show up in the preffered group, unfortunately I could not see them until a user logged on to that machine. 
I not sure what mode did you guys choose, my understanding is the SEP client reply on user to logon to initiate the smc comunication to SEPM so that the client can show up in the SEPM console.

Nel Ramos's picture
23
Jun
2009
0 Votes 0
Login to vote

Altiris works fine with SEPM

Altiris works fine with SEPM on this issue...
I had also checked what Sandip was mentioning but it was a flow chart with the following solution...

Question/Issue:
What is the process for a client to register with the Symantec Endpoint Protection Manager?

Solution:
The agent registration rules:

If the agent on that specified machine has registered before, the server will try to find the record for the agent and keep this agent in the same group and policy mode as before.
Try to match the computer or user criteria added by the administrator or sync from Active Directory and register to that corresponding group
If the agent is the first installed and registered, the predefined group on the agent side has the higher priority and the agent will be registered as computer-based
Try to search all the user-based agents with user name or computer name, if found, the new agent will register to the same group and the policy mode will be set to user-based.
If none of above criteria met, the new agent will register to the temporary group as a computer-based.

 

Nel Ramos

mssym's picture
23
Jun
2009
0 Votes 0
Login to vote

Is that possible that my package created in un-managed client?

It is weird, I just simply could not see the clients from any of the groups untill someone logon. Is that possible that my package created in un-managed client starting with and then dropped managed sylink.xml at the end of installation?
1. client never registered before
2. I do not use AD sync, (Symantec AD idea never worked for me)
Question: how is a client considered registered? if it just need to have client software installed with preferred group configured? then my client supposedly show in the prefered group. 

 

RickJDS's picture
23
Jun
2009
0 Votes 0
Login to vote

Yes, initially you created an

Yes, initially you created an un-managed client.  Your procedure to replace the Sylink file should make them managed.  It's because you deployed a user mode package that the client does not check in until a user logs in (from the help file):

Computer mode

Specifies that policies in the client installation package apply to computers as they authenticate to the Symantec Endpoint Protection Manager. This setting is recommended for first-time installations.

User mode

Specifies that policies in the client installation package apply to users as they log on to computers and authenticate to the Symantec Endpoint Protection Manager.

mssym's picture
23
Jun
2009
0 Votes 0
Login to vote

Is there a way to display the machine in the console?

If I deploy the USER mode package, Is there a way that I can let the machine names displayed in the console so that I can at least can see the antivirus version and defintion status of the machine?

Anyone used USER mode in this forum, can you share your experience with me? if I do not see my machine in the console before a user logon, is the computer still protected by antivirus?

jbmtl's picture
24
Jun
2009
0 Votes 0
Login to vote

altiris

if u try to deploy the agents through altiris

u can see that message client is installed but user not logged in

mssym's picture
24
Jun
2009
0 Votes 0
Login to vote

@vardhan1717: see client from SEPM console or Altiris?

@vardhan1717: see client from SEPM console or Altiris?