Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Machines changing from SEP-managed to self-managed

Updated: 22 May 2010 | 10 comments
Hericksen's picture
0 0 Votes
Login to vote
Hello!!
 
Since a few days, I have checked that a lot of machines changed their status from managed (connected to SEP server) to self-managed but I dont know why.
 
The strange is that those machines appears in symantec endpoint manager with the green dot, as connected to the server, but they are not receiving my policies. The update policies option is not available when they are self-managed
 
Somebody suffered the same problem? Is there any solution to re-connect those machines to server, Or I must have to replace their incorrect sylink.xml from the correct version? (using the netlogon script for example)
 
Why symantec not provide a tool to replace sylink.xml remotely?
 
The most important to me is to know the reason of this behaviour.
 
Thanks in advance!!!

Comments

Ted G.'s picture
13
Jun
2008
0 Votes 0
Login to vote

This can happen if you installed the SEPM and created the installation packages via an RDP session. If this is the case, to resolve this issue you will need to completely remove the product and install it while local to the SEPM machine. You will also want to make sure you are running the current build, MR2MP1.




Message Edited by Ted G. on 06-13-2008 07:28 AM

Knottyropes's picture
13
Jun
2008
0 Votes 0
Login to vote

I cant even describe the words I want to use right now.
 
I installed it via RDP just like everything else here and at 2 other offices.
Exchange 2003
ISA 2004
FTP, HTTPS, CRM
Blackberry Enterprise Server
Solidworks
SQL 2005
DC's,GC, LDAP, File server, Print Server, RAC, VPN
Office, AV, and 15 more applications.
 
I am so dissapointed right now.



Message Edited by Knottyropes on 06-13-2008 01:54 PM

Greg Huntzinger's picture
13
Jun
2008
0 Votes 0
Login to vote

I guess I need clarification on this.  I understand not installing SEPM or SEP via RDP.  I've run into problems with other packages with this before (although it's hard for me to understand how ENTERPRISE level software can't handle this). 
 
But am I to understand that I'm not supposed to be able to export client install packages via RDP either?  This is really, honest-to-goodness true?
 
And the only "fix" for this is to reinstall all of the clients?  Let me guess, I have to do an uninstall first, not just install over the top.
 
It's a good thing it's Friday.  I might start to cry.
 
Greg
Greg Huntzinger's picture
13
Jun
2008
0 Votes 0
Login to vote

Let me clarify, I'm asking about CREATING client install packages via export, not actually shipping them to the clients.
Ted G.'s picture
13
Jun
2008
0 Votes 0
Login to vote

Let me clarify.

...Installed/created in an RDP session that did not have console level access to the machine.

If you are going to use RDP to install the product and create installation packages you MUST ensure you have console level access to the machine, as I stated in another thread. Knotty knows this, as he has read and participated in that thread. No clue why he is so upset.

My bad for not posting that information here.

In order to see what type of connection you have to the machine, while remotely connected to said machine, open a DOS box on the machine you are remoted into and type "set" without the quotes. Scroll down until you find the "SESSIONNAME=" line. If it says anything other than Console, you do NOT have console level access to the machine.

For information on how to establish console level acces in RDP and install our products, please refer to the following document:

Title: 'How to install Symantec Endpoint Protection and Symantec Endpoint Protection Manager through Remote Desktop'
Document ID: 2008030509272248
> Web URL: http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008030509272248?Open&seg=ent



Greg Huntzinger's picture
13
Jun
2008
0 Votes 0
Login to vote

Ted,
 
Thanks for the response, however I'm still unclear about the required fix for clients that have been installed with an installer that was created via an RDP session.  Do those clients need to be uninstalled or cleanwiped or what?  How about installing a "correctly created" install over the top.
 
Thanks!
Ted G.'s picture
13
Jun
2008
0 Votes 0
Login to vote

Hi Greg,

That is an excellent question! I consulted some other techs here and we all came to the conclusion that running cleanwipe and re-deploying would be the best way to handle this. I know it's a pain, and I sincerely apoligize for that. But it really is the best way to ensure optimal results. We determined that over-installing would most likely not clean up whatever was causing the issue in the first place.

If you need the cleanwipe utility, you will need to call in to support and have a technician mail you the instructions for obtaining it. It's always best to use the latest version even if you have an old one laying around on a disk, or in a folder somewhere.




Greg Huntzinger's picture
13
Jun
2008
0 Votes 0
Login to vote

Thanks, Ted.  I guess my issue is that cleanwipe is not a really solid tool.  I've hit several client systems where it completely failed to uninstall sep and liveupdate.  It looks like it can't find msiexec.exe and regsvr32.exe after a while on these systems and fails to run the ininstaller.  On reboot, sep does not run, but it's still installed - hard to know what else is hanging around.  It is a bit discouraging.
RickJDS's picture
13
Jun
2008
0 Votes 0
Login to vote

I created the installation packages through an RDP session and I'm not experiencing any problems.  I have about 20 computers that I'm testing this on.  Are there any other symptoms other than what the OP stated about managed clients turning into unmanaged clients?

Hericksen's picture
15
Jun
2008
0 Votes 0
Login to vote

Hi Ted; all my installation packages were created using the symantec endpoint protection manager console installed on my computer, connecting to the sep server and exporting the package to a local hard disk, then this single .exe was copied to a shared folder on a server.
 
I have lost computers as well when upgrading from MR2 to MR2 MP1, this upgrade was done associating the new installation package in the install packages option on every group.
 
Any help will be wellcome
 
Thanks in advance!!!