Endpoint Protection

If this is in the wrong forum, I apologize.  The server I have SEP setup on had a hard drive failure yesterday so I've replaced it and have reinstalled the management software.  I'm new to this program and the person managing it in the past has left and I don't really have much documentation on it.  I have about 70 machines that are running 11.0.5.  I'm in the process of downloading 11.0.6 now.  My question is, do I have to re-deploy SEP to all machines or is there a way to find those machines and start managing them again on the protection manager I've just reinstalled? While the machines having 11.0.5 and protection manager being 11.0.6 cause an issue?  Thanks for any help provided.

once new manager is installed, take the sylik.xml file from agent/outbox folder

and use this tool to replace it on all clients they wil communicate

https://www-secure.symantec.com/connect/downloads/sylinkreplacer-tool-connecting-sep-clients-sepm

Hello,

In your Case, You can simply Install Symantec Endpoint Protection Manager on your Re-built (New) Server and would have to run a Utility Tool called as "SylinkReplacer" from the Server machine which will infact replace the Sylink Files on all machines making them re-managed to this server.

Download the Sylink Replacer from:

https://www-secure.symantec.com/connect/downloads/sylinkreplacer-tool-connecting-sep-clients-sepm

Using the "SylinkReplacer" Utility

http://www.symantec.com/business/support/index?page=content&id=TECH105211

Also check,

https://www-secure.symantec.com/connect/forums/move-clients-dead-server-replacement

Hope that works for you!!!

Don't forget to select the correct group for sylink.xml.

Can I change the group after the fact?  I'm in the process of running the tool mentioned above and I plan to have the pc's grouped by state, but currently I just selected the default "My Company" group.

Once clients start showing up in console you can move them to any group you want..

So I've run the tool and its found some of the pc's.  I know it didn't find my own laptop though even though its on the network and SEP has been on it.  In those cases where they aren't found by the tool, can I just take that sylink.xml file from the server and put it on the end user's PC manually and replace their current sylink.xml file?

Yes you can do that .Stop the smc service by using smc -stop command .Remove old sylink.xml(Program files\symantec\symantec endpoint protection) and put the new one in the same place ,start the smc service..

Awesome that worked.  A couple more questions and I think I will have everything answered.  Example, my SEP on my laptop is version 11.0.5.  The version of the protection manager is 11.0.6.  Will the local clients that have 11.0.5 update automatically to the newer version at some point or will that have to be a manual upgrade done on each client?  

And finally, if the tool replaces a sylink on lets say ip 192.168.1.14, if I run the tool again, it will skip over that IP because the xml file matches what it wants to replace it with correct?

Thanks again to everyone for all of your help.

11.06 manager will have the updates for 11.05 clients also.

If you run sylink replacer once again once again it it replaces the sylink files of all the systems (as per your selections).it will not skip anything.

You can also provide a list of systems which needs to be connected back to server to the sylink replacer...

Hi,

As per your comment " if the tool replaces a sylink on lets say ip 192.168.1.14, if I run the tool again, it will skip over that IP because the xml file matches what it wants to replace it with correct?"

- Tool won't skip that machine, it will again replace sylink.xml 

You can upgrade your clients through auto-upgrade. Manual upgrade is not required.                           

http://www.symantec.com/docs/TECH96789