I've been tried to replaced my sylink.xml from c:\program files\symantec\SEPM\data\outbox\agent\my group policy folder. Using sylinkdrop.exe and it works.
My problem now is how can I replaced the sylink.xml of all the clients in every group using their own designated sylink.xml? How can I replaced it in single time only?
We have our computers linked in by Active Directory. So in my environement I could drop a single sylink.xml onto all my MY's, pointing them to the default container in SEPM. Once they've talked to the new SEPM server, they would automatically relocate themselves into the proper location & get the policies configured for this location.
I have a ton of containters/groups/folders for clients all over the country, and i was able to use a single sylink file that dropped them into a new container called "New Computers" (or whatever you want) then I just moved them in the console based on IP address. Sylink replacer works really well, however we've had success with some simple scripts to replace the file as well, using altiris deployment server. It's just easier to have one sylink file to manage. You can also change the value of the "verify signatures" (within the xml file) to 0 so that it forces the client into the group the xml file designates. This gets changed when you change the Client Install Settings in the install package. Under "upgrade settings" there is an option to "remove all previous logs and policies, and reset the client-server communication settings".
Matt Barber
Advanced Client Services Engineer TN User Group Marketing Director
Download the SEP support tool in one of your client after replacing sylink and see whether it is throwing you some error.For more information this tool refer this KB
Try to run sylink replacer and used new sylink.xml with new security settings policy. Now the client is online and connected to SEPM 15 mins ago...
why is it that I need to reconfigure my security settings policy and used new sylink.xml for replacing the client old sylink.xml to be connected and online to SEPM?
In your case as far as I know either database or certificate files not got restored properly.....That is why you nedd to replace the sylink after the reinstallation of SEPM.............
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
Restore the database(I think you done already)
Copy server.xml from \Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\conf and keystore.jks from \Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\etc old installation to new installation in the same folders, run the management server configuration wizard
Also assure that the name and IP of the server is same as old....
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
3.Copy server.xml from \Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\conf to same folder in new installation .
4.Copy keystore.jks from \Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\etc to same folder in new installation.
5.Click Start> Programs> Symantec Endpoint Protection Manager> Management Server Configuration Wizard.
6.In the Welcome panel, check Reconfigure the Management Server, and then click Next.
7.In the Server Information panel, modify input values if necessary to match previous inputs, and then click Next.
8.In the Database Server Choice panel, check the database type to match the previous type, and then click Next.
9.In the Database Information panel, modify and insert input values to match previous inputs, and then click Next.
Note: The configuration takes a few minutes.
10.In the Configuration Completed dialog box, click Finish.
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
Comments
Use Sylink Replacer tool and
Use Sylink Replacer tool and a list of all the PCs which can be exported from the Monitors page.
“Your most unhappy customers are your greatest source of learning.”
I've been tried to replaced
I've been tried to replaced my sylink.xml from c:\program files\symantec\SEPM\data\outbox\agent\my group policy folder. Using sylinkdrop.exe and it works.
My problem now is how can I replaced the sylink.xml of all the clients in every group using their own designated sylink.xml? How can I replaced it in single time only?
Use sylinkreplacer multiple
Use sylinkreplacer multiple times with sylink.xml file from each group....
-VKalani
thank you..i will try it..and
thank you..i will try it..and i will update you later..
or in case if the computers
or in case if the computers are in domain, you can use domain policy to replace the sylink.xml
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
@pete_4u2002 do you have any
@pete_4u2002
do you have any procedure for this?..
thanks
Use Sylink Replacer. Here;s
Use Sylink Replacer.
Here;s the tool and instructions on how to run it
http://www.symantec.com/connect/downloads/sylinkreplacer-tool-connecting-sep-clients-sepm
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
We follow those instructions
We follow those instructions but sylink replacing unsuccessful.
thanks
Well i have observed that
Well i have observed that Sylink Replacer tool works on Ping utility. First it try to discover the clients and then replace the sylink.xml.
but the problem is that if the ping is block in client site although client pc is online then it ll not replace the sylink.xml file.
is there any other procedure to replace the sylink file other than thiz......
Saqib Alam|Senior Systems Engineer|Symantec Technical Specialist|
what is that
what is that procedure?
thanks
Have a look at this
Have a look at this KB
Anything helpful to you?
How to point Symantec Endpoint Protection(SEP) clients to a new Symantec Endpoint Protection Manager after you have either uninstalled, are going to decommission or replace the Existing Primary Symantec Endpoint Protection Manager (SEPM).
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
We have that kb...but still
We have that kb...but still all the clients offline status. also seen as online on SEPM.
thanks
Perhaps a single sylink.xml is ok?
This really depends on how you are setup;
We have our computers linked in by Active Directory. So in my environement I could drop a single sylink.xml onto all my MY's, pointing them to the default container in SEPM. Once they've talked to the new SEPM server, they would automatically relocate themselves into the proper location & get the policies configured for this location.
YMMV.
Single
I have a ton of containters/groups/folders for clients all over the country, and i was able to use a single sylink file that dropped them into a new container called "New Computers" (or whatever you want) then I just moved them in the console based on IP address. Sylink replacer works really well, however we've had success with some simple scripts to replace the file as well, using altiris deployment server. It's just easier to have one sylink file to manage. You can also change the value of the "verify signatures" (within the xml file) to 0 so that it forces the client into the group the xml file designates. This gets changed when you change the Client Install Settings in the install package. Under "upgrade settings" there is an option to "remove all previous logs and policies, and reset the client-server communication settings".
Matt Barber
Advanced Client Services Engineer
TN User Group Marketing Director
this my xml file: <Server
this my xml file:
<Server Address="x.x.x.x" HttpPort="8014" HttpsVerifyCA="0" VerifySignatures="0" />
I used this xml file and replaced to a test client, still client status offline...online status on SEPM
thanks
post the sylink logs after
post the sylink logs after replacing the sylink.xml file.
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
Download the SEP support
Download the SEP support tool in one of your client after replacing sylink and see whether it is throwing you some error.For more information this tool refer this KB
About the Symantec Endpoint Protection Support Tool
You can use this same tool in SEPM also for diagnosing...
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
Try to run sylink replacer
Try to run sylink replacer and used new sylink.xml with new security settings policy. Now the client is online and connected to SEPM 15 mins ago...
why is it that I need to reconfigure my security settings policy and used new sylink.xml for replacing the client old sylink.xml to be connected and online to SEPM?
thank you
In your case as far as I know
In your case as far as I know either database or certificate files not got restored properly.....That is why you nedd to replace the sylink after the reinstallation of SEPM.............
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
I think my prob is on the
I think my prob is on the certificate because when i unchecked the "enable secure certificate" and used new sylink.xml to client ..its working
Do you have a copy of old
Do you have a copy of old tomcat folder or server.xml and kestore.jks files?
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
yes i have...any procedure
yes i have...any procedure for restoration of .xml and .jks file?
thanks
Restore the database(I think
Restore the database(I think you done already)
Copy server.xml from \Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\conf and keystore.jks from \Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\etc old installation to new installation in the same folders, run the management server configuration wizard
Also assure that the name and IP of the server is same as old....
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
should i copy and paste or
should i copy and paste or need to run management server config wizard
do you have step by step
do you have step by step procedure for this?
thanks
load my old .jks file using
load my old .jks file using manage server certificate wizard..
Steps are like this 1.Stop
Steps are like this
1.Stop SEPM service
2.Restore the database(I think you done already)
3.Copy server.xml from \Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\conf to same folder in new installation .
4.Copy keystore.jks from \Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\etc to same folder in new installation.
5.Click Start> Programs> Symantec Endpoint Protection Manager> Management Server Configuration Wizard.
6.In the Welcome panel, check Reconfigure the Management Server, and then click Next.
7.In the Server Information panel, modify input values if necessary to match previous inputs, and then click Next.
8.In the Database Server Choice panel, check the database type to match the previous type, and then click Next.
9.In the Database Information panel, modify and insert input values to match previous inputs, and then click Next.
Note: The configuration takes a few minutes.
10.In the Configuration Completed dialog box, click Finish.
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
i will try this..we will
i will try this..we will update you later
thanks..
Would you like to reply?
Login or Register to post your comment.