Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

How to replace sylink.xml of every group in SEPM?

Created: 13 Sep 2010 | 28 comments
mrbuguz®'s picture
0 0 Votes
Login to vote

Comments

mon_raralio's picture
13
Sep
2010
0 Votes 0
Login to vote

Use Sylink Replacer tool and

Use Sylink Replacer tool and a list of all the PCs which can be exported from the Monitors page.

“Your most unhappy customers are your greatest source of learning.”

mrbuguz®'s picture
13
Sep
2010
0 Votes 0
Login to vote

I've been tried to replaced

I've been tried to replaced my sylink.xml from c:\program files\symantec\SEPM\data\outbox\agent\my group policy folder. Using sylinkdrop.exe and it works.

My problem now is how can I replaced the sylink.xml of all the clients in every group using their own designated sylink.xml? How can I replaced it in single time only? 

VKalani's picture
13
Sep
2010
0 Votes 0
Login to vote

Use  sylinkreplacer multiple

Use  sylinkreplacer multiple times with sylink.xml file from each group....

-VKalani

mrbuguz®'s picture
13
Sep
2010
0 Votes 0
Login to vote

thank you..i will try it..and

thank you..i will try it..and i will update you later..

pete_4u2002's picture
13
Sep
2010
1 Vote +1
Login to vote

or in case if the computers

or in case if the computers are in domain, you can use domain policy to replace the sylink.xml

mrbuguz®'s picture
13
Sep
2010
0 Votes 0
Login to vote

@pete_4u2002 do you have any

@pete_4u2002

do you have any procedure for this?..

thanks

 

Vikram Kumar-SAV to SEP's picture
13
Sep
2010
1 Vote +1
Login to vote
mrbuguz®'s picture
14
Sep
2010
0 Votes 0
Login to vote

We follow those instructions

We follow those instructions but sylink replacing unsuccessful.

thanks

salamz's picture
14
Sep
2010
0 Votes 0
Login to vote

Well i have observed that

Well i have observed that Sylink Replacer tool works on Ping utility. First it try to discover the clients and then replace the sylink.xml.

but the problem is that if the ping is block in client site although client pc is online then it ll not replace the sylink.xml file.

is there any other procedure to replace the sylink file other than thiz......

Saqib Alam|Senior Systems Engineer|Symantec Technical Specialist|

mrbuguz®'s picture
14
Sep
2010
0 Votes 0
Login to vote

what is that

what is that procedure?

 

thanks

AravindKM's picture
14
Sep
2010
1 Vote +1
Login to vote
mrbuguz®'s picture
14
Sep
2010
0 Votes 0
Login to vote

We have that kb...but still

We have that kb...but still all the clients offline status. also seen as online on SEPM.

thanks

PrimeInc's picture
14
Sep
2010
1 Vote +1
Login to vote

Perhaps a single sylink.xml is ok?

This really depends on how you are setup;

 

We have our computers linked in by Active Directory.   So in my environement I could drop a single sylink.xml onto all my MY's, pointing them to the default container in SEPM.    Once they've talked to the new SEPM server, they would automatically relocate themselves into the proper location & get the policies configured for this location.

YMMV.

 

MattBarber's picture
14
Sep
2010
1 Vote +1
Login to vote

Single

I have a ton of containters/groups/folders for clients all over the country, and i was able to use a single sylink file that dropped them into a new container called "New Computers" (or whatever you want) then I just moved them in the console based on IP address.  Sylink replacer works really well, however we've had success with some simple scripts to replace the file as well, using altiris deployment server.  It's just easier to have one sylink file to manage.  You can also change the value of the "verify signatures" (within the xml file) to 0 so that it forces the client into the group the xml file designates.  This gets changed when you change the Client Install Settings in the install package.  Under "upgrade settings" there is an option to "remove all previous logs and policies, and reset the client-server communication settings".

Matt Barber
Advanced Client Services Engineer

TN User Group Marketing Director

mrbuguz®'s picture
14
Sep
2010
0 Votes 0
Login to vote

this my xml file: <Server

this my xml file:

<Server Address="x.x.x.x" HttpPort="8014" HttpsVerifyCA="0" VerifySignatures="0" />

I used this xml file and replaced to a test client, still client status offline...online status on SEPM

thanks
 

pete_4u2002's picture
14
Sep
2010
0 Votes 0
Login to vote

post the sylink logs after

post the sylink logs after replacing the sylink.xml file.

AravindKM's picture
14
Sep
2010
0 Votes 0
Login to vote

  Download the SEP support

 

Download the SEP support tool in one of your client after replacing sylink and see whether it is throwing you some error.For more information this tool refer this KB

About the Symantec Endpoint Protection Support Tool

You can use this same tool in SEPM also for diagnosing...

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

mrbuguz®'s picture
15
Sep
2010
0 Votes 0
Login to vote

Try to run sylink replacer

Try to run sylink replacer and used new sylink.xml with new security settings policy. Now the client is online and connected to SEPM 15 mins ago...

why is it that I need to reconfigure my security settings policy and used new sylink.xml for replacing the client old sylink.xml to be connected and online to SEPM?

 

thank you

AravindKM's picture
15
Sep
2010
0 Votes 0
Login to vote

In your case as far as I know

In your case as far as I know either database or certificate files not got restored properly.....That is why you nedd to replace the sylink after the reinstallation of SEPM.............

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

mrbuguz®'s picture
15
Sep
2010
0 Votes 0
Login to vote

I think my prob is on the

I think my prob is on the certificate because when i unchecked the "enable secure certificate" and used new sylink.xml to client ..its working

AravindKM's picture
15
Sep
2010
0 Votes 0
Login to vote

Do you have a copy of old

Do you have a copy of old tomcat folder or server.xml and kestore.jks files?

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

mrbuguz®'s picture
15
Sep
2010
0 Votes 0
Login to vote

yes i have...any procedure

yes i have...any procedure for restoration of .xml and .jks file?

thanks

AravindKM's picture
15
Sep
2010
0 Votes 0
Login to vote

Restore the database(I think

Restore the database(I think you done already)
  Copy server.xml from  \Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\conf and keystore.jks from \Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\etc  old installation to new installation in the same folders, run the management server configuration wizard 

 

Also assure that the name and IP of the server is same as old....

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

mrbuguz®'s picture
15
Sep
2010
0 Votes 0
Login to vote

should i copy and paste or

should i copy and paste or need to run management server config wizard

mrbuguz®'s picture
15
Sep
2010
0 Votes 0
Login to vote

do you have step by step

do you have step by step procedure for this?

thanks

mrbuguz®'s picture
15
Sep
2010
0 Votes 0
Login to vote

load my old .jks file using

load my old .jks file using manage server certificate wizard..

AravindKM's picture
15
Sep
2010
0 Votes 0
Login to vote

Steps are like this  1.Stop

Steps are like this 

1.Stop SEPM service

2.Restore the database(I think you done already)

3.Copy server.xml from \Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\conf to same folder in new installation .

4.Copy keystore.jks from \Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\etc  to same folder in new installation.

5.Click Start> Programs> Symantec Endpoint Protection Manager> Management Server Configuration Wizard.
6.In the Welcome panel, check Reconfigure the Management Server, and then click Next.
7.In the Server Information panel, modify input values if necessary to match previous inputs, and then click Next.
8.In the Database Server Choice panel, check the database type to match the previous type, and then click Next.
9.In the Database Information panel, modify and insert input values to match previous inputs, and then click Next.
Note: The configuration takes a few minutes.
10.In the Configuration Completed dialog box, click Finish.

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

mrbuguz®'s picture
15
Sep
2010
0 Votes 0
Login to vote

i will try this..we will

i will try this..we will update you later

thanks..