How to make once-managed PCs unmanaged?
Updated: 21 May 2010 | 7 comments
This issue has been solved. See solution.
Hi --
We installed SEP 11 on an SBS2003 network with five PCs, two of which are mostly out of the office. After all sorts of grief with the SEP Manager on the server, we removed it. One of the many problems we were having was that the supposedly managed PCs were not acquiring updates by themselves. Rather, when the computers complained that the AV definitions were out of date, we had to force manual LiveUpdates on them.
Now I have PCs that still can't update their own AV definitions, but I have no way to change their LiveUpdate behavior because all those features are disabled.
How do I un-manage these PCs?
Thanks
discussion Filed Under:
Comments
in cd browse to path
in cd browse to path SEP folder or search for sylink.xml from the setup cd 1. Copy the sylink.xml onto these managed client machine to turn these from managed to unmanaged. However why not change policy to have LU enabled on client machines ( but I have no way to change their LiveUpdate behavior because all those features are disabled.)
Cheers
Pete!
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
Reinstall is the only solution.
Uninstall the SEP and reinstall as unmanaged client is the only solution to get your liveupdate option back.
How to make once-managed PCs unmanaged?
Hi...
Plz tell what u need exactly....
managed pc to unmanaged pc
OR
unmanaged pc to managed pc.
2 options
One Un-install and re-install
2nd -HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\Liveupdate
Then values for these 2 to 1
AllowLocalScheduleChange
AllowManualLiveUpdate
IF you are doing the second option make sure sylink is replaced as well because once the SEP client connects back to the manager the settings will revert back.
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
Clarification
Hi guys --
There is no manager anymore on the server. On the server, we completely uninstalled everything and then installed just the client as unmanaged.
We had to do that because the full package was killing the server (even though it had been running prior SAV versions -- managed -- without a problem), it couldn't even properly keep track of the PCs on the LAN, and most of the PCs were not updating their AV definitions.
I really would rather not have to uninstall and reinstall the PCs, though ...
Thanks
CL
Follow pete's advice about
Follow pete's advice about replacing the sylink.xml file from the CD to your clients. You will have to stop the SMC service from the command line i.e.,
"c:\program files\symantec\symantec endpoint protection\smc.exe" -stop
copy and replace the sylink file to the Symantec Endpoint Protection folder (or where you installed SEP) and run:
"c:\program files\symantec\symantec endpoint protection\smc.exe" -start
Thanks
That was the piece I was missing ... I had already made the Registry changes and changed the update settings on one of the PCs, but I couldn't rename or edit the sylink.xml file and the PC couldn't be shut down at the time.
Thanks!
Would you like to reply?
Login or Register to post your comment.