Endpoint Protection

Use Sylink Replacer tool and a list of all the PCs which can be exported from the Monitors page.

I've been tried to replaced my sylink.xml from c:\program files\symantec\SEPM\data\outbox\agent\my group policy folder. Using sylinkdrop.exe and it works.

My problem now is how can I replaced the sylink.xml of all the clients in every group using their own designated sylink.xml? How can I replaced it in single time only? 

Use  sylinkreplacer multiple times with sylink.xml file from each group....

thank you..i will try it..and i will update you later..

or in case if the computers are in domain, you can use domain policy to replace the sylink.xml

@pete_4u2002

do you have any procedure for this?..

thanks

Use Sylink Replacer.

Here;s the tool and instructions on how to run it

http://www.symantec.com/connect/downloads/sylinkreplacer-tool-connecting-sep-clients-sepm

Well i have observed that Sylink Replacer tool works on Ping utility. First it try to discover the clients and then replace the sylink.xml.

but the problem is that if the ping is block in client site although client pc is online then it ll not replace the sylink.xml file.

is there any other procedure to replace the sylink file other than thiz......

Have a look at this KB

Anything helpful to you?

How to point Symantec Endpoint Protection(SEP) clients to a new Symantec Endpoint Protection Manager after you have either uninstalled, are going to decommission or replace the Existing Primary Symantec Endpoint Protection Manager (SEPM).

This really depends on how you are setup;

We have our computers linked in by Active Directory.   So in my environement I could drop a single sylink.xml onto all my MY's, pointing them to the default container in SEPM.    Once they've talked to the new SEPM server, they would automatically relocate themselves into the proper location & get the policies configured for this location.

YMMV.

I have a ton of containters/groups/folders for clients all over the country, and i was able to use a single sylink file that dropped them into a new container called "New Computers" (or whatever you want) then I just moved them in the console based on IP address.  Sylink replacer works really well, however we've had success with some simple scripts to replace the file as well, using altiris deployment server.  It's just easier to have one sylink file to manage.  You can also change the value of the "verify signatures" (within the xml file) to 0 so that it forces the client into the group the xml file designates.  This gets changed when you change the Client Install Settings in the install package.  Under "upgrade settings" there is an option to "remove all previous logs and policies, and reset the client-server communication settings".

what is that procedure?

thanks

We have that kb...but still all the clients offline status. also seen as online on SEPM.

thanks

We follow those instructions but sylink replacing unsuccessful.

thanks

this my xml file:

<Server Address="x.x.x.x" HttpPort="8014" HttpsVerifyCA="0" VerifySignatures="0" />

I used this xml file and replaced to a test client, still client status offline...online status on SEPM

thanks
 

post the sylink logs after replacing the sylink.xml file.

Download the SEP support tool in one of your client after replacing sylink and see whether it is throwing you some error.For more information this tool refer this KB

About the Symantec Endpoint Protection Support Tool

You can use this same tool in SEPM also for diagnosing...

Try to run sylink replacer and used new sylink.xml with new security settings policy. Now the client is online and connected to SEPM 15 mins ago...

why is it that I need to reconfigure my security settings policy and used new sylink.xml for replacing the client old sylink.xml to be connected and online to SEPM?

thank you

In your case as far as I know either database or certificate files not got restored properly.....That is why you nedd to replace the sylink after the reinstallation of SEPM.............

I think my prob is on the certificate because when i unchecked the "enable secure certificate" and used new sylink.xml to client ..its working

Do you have a copy of old tomcat folder or server.xml and kestore.jks files?

yes i have...any procedure for restoration of .xml and .jks file?

thanks

Restore the database(I think you done already)
  Copy server.xml from  \Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\conf and keystore.jks from \Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\etc  old installation to new installation in the same folders, run the management server configuration wizard 

Also assure that the name and IP of the server is same as old....

should i copy and paste or need to run management server config wizard

do you have step by step procedure for this?

thanks

load my old .jks file using manage server certificate wizard..

Steps are like this 

1.Stop SEPM service

2.Restore the database(I think you done already)

3.Copy server.xml from \Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\conf to same folder in new installation .

4.Copy keystore.jks from \Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\etc  to same folder in new installation.

5.Click Start> Programs> Symantec Endpoint Protection Manager> Management Server Configuration Wizard.
6.In the Welcome panel, check Reconfigure the Management Server, and then click Next.
7.In the Server Information panel, modify input values if necessary to match previous inputs, and then click Next.
8.In the Database Server Choice panel, check the database type to match the previous type, and then click Next.
9.In the Database Information panel, modify and insert input values to match previous inputs, and then click Next.
Note: The configuration takes a few minutes.
10.In the Configuration Completed dialog box, click Finish.

i will try this..we will update you later

thanks..