Endpoint Protection

 View Only

  • 1.  Moving clients to a new SEPM

    Posted Apr 28, 2015 12:25 PM

    Hi guys!

    I have installed a new SEPM environment and I'm trying to move the clients from SEPM-Old to SEPM-New using the Client Deployment Wizard (Home tab) and selecting the Communication Update Package Deployment option. But when the wizard asks for the administrator account it fails to login, even when the credentials are right.

    I've tried with local-admin account and domain-admin account but it always fails.

    Also, I've an open case asking for Sylinkreplacer Utility but Symantec has not answered yet.

    The SEPM runs on Windows Server 2012 R2 and clients runs on Windows XP, Windows Vista, Windows 7 (Ultimate, Pro & Enterprise), Windows 8 Pro and Windows 8.1 Pro (Win7 and Win8/8.1, 32 & 64 bits).

    • SEPM-Old: 12.1 RU1
    • SEPM-New: 12.1 RU5
    • Clients: 12.1 RU5

    I don't know what else to do, the only way to move clients is with SylinkDrop but we can't go moving one by one.

    Hope somebody can help me.

    Regards!



  • 2.  RE: Moving clients to a new SEPM

    Broadcom Employee
    Posted Apr 28, 2015 12:27 PM

    Provide me the case number, I shall look into it.



  • 3.  RE: Moving clients to a new SEPM
    Best Answer

    Posted Apr 28, 2015 12:28 PM

    Did you follow steps here:

    Preparing Windows and Mac computers for remote deployment



  • 4.  RE: Moving clients to a new SEPM

    Posted Apr 28, 2015 12:31 PM

    Chetan:

    Case Number:08663405 ... But is just asking for the Sylinkreplacer.

     

    Brian:

    Thanks for the link, I'm doing that right now. I'll post the results.



  • 5.  RE: Moving clients to a new SEPM

    Broadcom Employee
    Posted Apr 28, 2015 12:39 PM

    Case is now assigned to engineer however I have sent PM to you. Kindly check.



  • 6.  RE: Moving clients to a new SEPM

    Posted Apr 28, 2015 02:27 PM

    Thank you very much Chetan.

    The solution that Brian gave seems to work on my environment test. I'll keep posting results.



  • 7.  RE: Moving clients to a new SEPM

    Broadcom Employee
    Posted Apr 28, 2015 02:34 PM

    Good to know it's working, BTW which settings were missing on client machines?



  • 8.  RE: Moving clients to a new SEPM

    Posted Apr 28, 2015 05:36 PM

    The key registry LocalAccountTokenFilterPolicy doesn't exist so I've to create it and the Remote Registry Service was stoped and disabled, I just activated and started that service.

    With those setings I was able to send the packages with the Deployment Wizard.



  • 9.  RE: Moving clients to a new SEPM

    Trusted Advisor
    Posted Apr 29, 2015 05:03 AM

    Hello,

    Good to hear that the solution works.

    Preparing Windows operating systems for remote deployment

    http://www.symantec.com/docs/HOWTO80805

    It states -

    Before you deploy, perform the following tasks:

    • Disable the Windows Firewall.

    • Create the registry key LocalAccountTokenFilterPolicy. For more information, visit the following URL:

      http://support.microsoft.com/kb/942817

    • Enable and start the Remote Registry service.

    Hope that helps!!