How do you normally let the client showing in the SEPM console if no one logs onto a computer yet?
Updated: 21 May 2010 | 10 comments
If you use third party to deploy SEP client, such as SMS, SCCM, the client will not appear in the SEPM console untill a user log onto the computer, does anyone try any methods to have the client showing in the console before someone log onto the computer?
discussion Filed Under:
Comments
Client and SEPM Console
Hi,
There is a method for the client to register with the SEPM console so that it can be seen. The below link explains it in detail. Please go through it and let us know in case you require further assistance.
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008123014151248
Thanks & Regards Sandip C Sali
I deploy using SMS and the
I deploy using SMS and the client DOES show in the symantec console even if the user hasn't logged on?
Altiris
We use Altiris (now owned by Symantec but we've got a 'pre-Symantec' version). The machines show up fine in the console no user logged in.
which mode do you guys choose?
I guess it does not matter what distribution software we choose to deploy SEP 11.0 client, either SCCM, SMS or Altiris, My package was configured with USER Mode im un-managed group, at the endof instalaltion, I used MSI transform to launch sylinkdrop to drop a managed group sylink.xml on the machine, I was assuming that client should show up in the preffered group, unfortunately I could not see them until a user logged on to that machine.
I not sure what mode did you guys choose, my understanding is the SEP client reply on user to logon to initiate the smc comunication to SEPM so that the client can show up in the SEPM console.
Altiris works fine with SEPM
Altiris works fine with SEPM on this issue...
I had also checked what Sandip was mentioning but it was a flow chart with the following solution...
Question/Issue:
What is the process for a client to register with the Symantec Endpoint Protection Manager?
Solution:
The agent registration rules:
If the agent on that specified machine has registered before, the server will try to find the record for the agent and keep this agent in the same group and policy mode as before.
Try to match the computer or user criteria added by the administrator or sync from Active Directory and register to that corresponding group
If the agent is the first installed and registered, the predefined group on the agent side has the higher priority and the agent will be registered as computer-based
Try to search all the user-based agents with user name or computer name, if found, the new agent will register to the same group and the policy mode will be set to user-based.
If none of above criteria met, the new agent will register to the temporary group as a computer-based.
Nel Ramos
Is that possible that my package created in un-managed client?
It is weird, I just simply could not see the clients from any of the groups untill someone logon. Is that possible that my package created in un-managed client starting with and then dropped managed sylink.xml at the end of installation?
1. client never registered before
2. I do not use AD sync, (Symantec AD idea never worked for me)
Question: how is a client considered registered? if it just need to have client software installed with preferred group configured? then my client supposedly show in the prefered group.
Yes, initially you created an
Yes, initially you created an un-managed client. Your procedure to replace the Sylink file should make them managed. It's because you deployed a user mode package that the client does not check in until a user logs in (from the help file):
Computer mode
Specifies that policies in the client installation package apply to computers as they authenticate to the Symantec Endpoint Protection Manager. This setting is recommended for first-time installations.
User mode
Specifies that policies in the client installation package apply to users as they log on to computers and authenticate to the Symantec Endpoint Protection Manager.
Is there a way to display the machine in the console?
If I deploy the USER mode package, Is there a way that I can let the machine names displayed in the console so that I can at least can see the antivirus version and defintion status of the machine?
Anyone used USER mode in this forum, can you share your experience with me? if I do not see my machine in the console before a user logon, is the computer still protected by antivirus?
altiris
if u try to deploy the agents through altiris
u can see that message client is installed but user not logged in
@vardhan1717: see client from SEPM console or Altiris?
@vardhan1717: see client from SEPM console or Altiris?
Would you like to reply?
Login or Register to post your comment.