Endpoint Protection

I'm in the midst of migrating SEP 12.1.2 from an old server to a new one according to the "Replication Migration Process" in  

http://www.symantec.com/docs/TECH171767.  It's working as advertised.  I'm leaving the old server up with the SEP services running for the week so my clients can be properly re-assigned to the new server.  I'd like to shut down the old server at the end of the week.  I have two clean up issues I know I'll have to deal with.

1. Updating the clients that happened to be offline all this week (hopefully a small number).

2. Updating my install packages to point to the new server.

I know the sylink.xml is the key to both these steps. For my previously offline clients that may show up next week, are the steps in http://www.symantec.com/docs/TECH157585 the best option?  btw, my clients are a mix of 11.0.7 and 12.1.2.  My server is 12.1.2.

For my install packages, do I export a sylink.xml from the proper default group in SEPM on the new server (according to http://www.symantec.com/docs/TECH157585) and copy that to my install package(s)?  I don't use different packages for different groups as seen by SEP. 

I use SCCM to deploy a single SEP package to my clients instead of SEPM.  I define policies according to AD OU and I'm hoping that those settings/policies are deployed after the client connects back to my server.  That may be a different discussion to start.  Let me know if I'm doing this incorrectly.

Thanks!

To restore the sylink of 12.1 RU2 clients use the below link

https://www-secure.symantec.com/connect/articles/sep-12-ru2-and

Best option is that to deploy the package on clients you can use

https://www-secure.symantec.com/connect/articles/client-deployment-wizard-sep-121

https://www-secure.symantec.com/connect/articles/overview-push-deployment-wizard-symantec-endpoint-protection-121

*Edit*

If you want to continue the client with 11.x then use the 11.x Sylink replacer to connect with Server

https://www-secure.symantec.com/connect/downloads/sylinkreplacer-tool-connecting-sep-clients-sepm

If you have client which is lower than 12.1 RU2 and need to continue with same version then contact with symantec team to get the sylink replacer for 12.1

SylinkReplacer for SEP 12.1 is only available with Symantec Technical Support Team.

Create a case with with Symantec Technical Support Team.

How to create a new case in MySupport

http://www.symantec.com/docs/TECH58873

Phone numbers to contact Tech Support:-

Regional Support Telephone Numbers:

• United States: https://support.broadcom.com (407-357-7600 from outside the United States)
• Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
• United Kingdom: +44 (0) 870 606 6000

Additional contact numbers: http://www.symantec.com/business/support/contact_techsupp_static.jsp

Check the forum

https://www-secure.symantec.com/connect/forums/upgrading-sep-122

Create the custom package

https://www-secure.symantec.com/connect/articles/how-do-i-create-and-configure-custom-symantec-endpoint-protection-installation-package-vers

How to upgrade Symantec Endpoint Protection clients by using Auto-Upgrade

Hi,

If client is listed in the group and is still showing offline then can refer the following article to restore the client communication.

https://www-secure.symantec.com/connect/articles/sep-12-ru2-and

If clients are not listed and want to restore the communication then need to use Sylink replacer tool.

For SEP 11.x and SEP 12.1 there are two different Sylink replacer tools.

You need to contact support to get this tools. Create a web case & ask the support to send required credentials to download tools.

How to create a new case in MySupport

http://www.symantec.com/docs/TECH58873

I have to repeat one question.  I use SCCM to deploy our packages.  I still deploy 11.0.7 to computers b/c 12.1.2 was giving us some issues.  Can I export my new sylink.xml and replace the existing one in my package source?  Will that properly update whatever info is applied when the package is deployed?

Yes, you should be able to just replace the sylink file in your package.

Yes, you can do that.

I don't think the Sylink Replacer tool is going to help me.  The bulk of the offline computers I'm looking at are laptops that are powered off most of the time.  Some are "public" laptops that users check out for meetings and others are just primary computers for users that are travelling or on vacation.

Is there a way to deal with a computer as it reconnects back to the domain, other than leaving the old server online for a long time until we get down to a really small number of "offline" computers? 

If our Service Desk has to deal with these "offline" computers as they come back in the office, is it as simple as copying down a new Sylink.xml to C:\Program Files\Symantec\Symantec Endpoint Protection\ on the client computer and restart it?

The bottom line is the set of computers I'm looking at are not going to be reachable in bulk.  It will be one at a time as they are reconnected to the network.  I won't be able to predict when each comes back online unless we search them out first (which is probably the better plan).

 is it as simple as copying down a new Sylink.xml to C:\Program Files\Symantec\Symantec Endpoint Protection\ on the client computer and restart it?

Yes

start - run

smc -stop

replace the sylink

smc -start

even a reboot is not necessary.