Endpoint Protection

Hi --

We installed SEP 11 on an SBS2003 network with five PCs, two of which are mostly out of the office. After all sorts of grief with the SEP Manager on the server, we removed it. One of the many problems we were having was that the supposedly managed PCs were not acquiring updates by themselves. Rather, when the computers complained that the AV definitions were out of date, we had to force manual LiveUpdates on them.

Now I have PCs that still can't update their own AV definitions, but I have no way to change their LiveUpdate behavior because all those features are disabled.

How do I un-manage these PCs?

Thanks

in cd browse to path SEP folder or search for sylink.xml from the setup cd 1. Copy the sylink.xml onto these managed client machine to turn these from managed to unmanaged. However why not change policy to have LU enabled on client machines ( but I have no way to change their LiveUpdate behavior because all those features are disabled.)

Cheers
Pete!

Uninstall the SEP and reinstall as unmanaged client is the only solution to get your liveupdate option back.

Hi...

Plz tell what u need exactly....

managed pc to unmanaged pc

OR

unmanaged pc to managed pc.

One Un-install and re-install

2nd -HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\Liveupdate

Then values for these 2 to 1
AllowLocalScheduleChange
AllowManualLiveUpdate

IF you are doing the second option make sure sylink is replaced as well because once the SEP client connects back to the manager the settings will revert back.

Hi guys --

There is no manager anymore on the server. On the server, we completely uninstalled everything and then installed just the client as unmanaged.

We had to do that because the full package was killing the server (even though it had been running prior SAV versions -- managed -- without a problem), it couldn't even properly keep track of the PCs on the LAN, and most of the PCs were not updating their AV definitions.

I really would rather not have to uninstall and reinstall the PCs, though ...

Thanks
CL

Follow pete's advice about replacing the sylink.xml file from the CD to your clients.  You will have to stop the SMC service from the command line i.e.,

"c:\program files\symantec\symantec endpoint protection\smc.exe" -stop
copy and replace the sylink file to the Symantec Endpoint Protection folder (or where you installed SEP) and run:
"c:\program files\symantec\symantec endpoint protection\smc.exe" -start

That was the piece I was missing ... I had already made the Registry changes and changed the update settings on one of the PCs, but I couldn't rename or edit the sylink.xml file and the PC couldn't be shut down at the time.

Thanks!