Endpoint Protection

I have found a few threads and KB documents about backups and server migrating. But our situation is this: SEPM server is broken and there is no backup. So i have to install SEPM on a new server (different hostname and IP). I'm trying to figure out a way to point all the existing clients to the new server. We have a domain and i can import all the computers from AD, but they are showing up as offline. I know that server information is stored in SyLink.xml, but i can't replace it while SEP is running, so probably it won't be possible to do this with statup scripts. Maybe there is a registry key i can change? I'm now trying to put one of undetecte computers to a group with installation package set. Wonder is this going to work? Or maybe i should do this via Deployment wizard, but it wasn't a very satisfying tool in the past. Another problem with that could be that those computers already has the latest version, so maybe it will refuse to install it again.

 Run SylinkReplacer tool on the server it will replace it for all your clients

Read the PDf Included 
https://www-secure.symantec.com/connect/downloads/sylinkreplacer-tool-connecting-sep-clients-sepm

Thanks. Partially it works. Partially, because it seems it can't reach our Vista based clients. I'm launching it not with a domain admins member (because domain admins group is not included in local administrators group). I'm logged in with a local administrator of that server, which is the same as local administrators on clients. And it works, with XP only, so far.

on vista may be your UAC is not letting the tool to work
try disabling it and run the replacer,  

It doesn't look like it's an UAC issue. When i'm trying to run this tool locally on XP client, it is fine. When i'm trying to run it locally on Vista, it says that SEP client is not found. Same with UAC disabled. It can't find SEP on Vista somehow. Most of our XP clients were upgraded from SAVC once, so there is a folder C:\Program Files\Symantec AntiVirus\. All Vistas has C:\Program Files\Symantec\Symantec Endpoint Protection folders. I don't remember exactly, but at some point working with Replacer i saw two txt files a.txt, b.txt and both of them contained this older path C:\Program Files\Symantec AntiVirus. Maybe Replacer just can't find SEP client?

correct!
if you have upgraded from SAV you will find  C:\Program Files\Symantec AntiVirus\.
if new install it should be in Files\Symantec\Symantec Endpoint Protection , these are the folders it checks.

try this tool it should query symantec endpoint protection folder
https://www-secure.symantec.com/connect/downloads/sylink-replacer

 On the clients on which the Sylink Replacer is failing you can use this package

How to restore/retain client-server communication using custom installation settings without having to use the sylink drop tool.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008052008163148

This 1.2 version behaves the same on Vista. It can't detect SEP client.

create a folder by name  
C:\Program Files\Symantec AntiVirus\
does that work after that?

No. Still can't detect SEP client.

 Did you try the package using the link above..
The number of Vista and Win 7 clients would be less so you can run deploy this package on them either using Find Unmanaged computer ( it will even show you the OS ) or export the package and deploy using Migration and Deployment.

Yes. I have just tried to deploy such "reset" package to one Vista client via Deploy wizard. It worked. Just hoped to find a little bit faster and less painful (for end users) way. Seems that we will have to use this option for Vista clients. Thanks.

A side note. As i said previously i was looking for an option without using Migration and Deployment wizard, because this tool was a pain in the ass in the past. Now i had no choice but to use it to reset Symantec communications settings on Vista clients. And today my phone is hot, because every Vista client has hanged on shutdown. Really **** product.

 Well...This was not expected..was SEP client was installed with Full Features of SEP before and the new Package contained the same ?

You can use FInd Unmanaged Computers migration and deployment wiz is optional..still it should make no diffrence.

The only thing I can think of is UAC ( User Access Control ) on these vista systems.

Yes it was installed with full features before, and "reset" package was the same, just used different Instalaltion settings policy (where i have only selected for the setup to reset communication settings). I think Find works the same as deploy wizard.

It could sure be UAC related, but hey, Vista is already many years around and there are still issues with it.