Endpoint Protection

Hello,

We have a variatiey of different versions of SEP installed on our servers with different iterations.  Anywhere from SEP 11 to the latest.  Possibly some SAV 10 as well.  There are about 1500 servers that are not reporting to SEPM and we are not sure if SEP is installed on them or just not working.  I would like to provide a simple batch script to our server engineers to run against all servers that are not showing in SEPM to see if SEP is installed on these servers but just not running.  If SEP is installed and service is not running then I would probably want to do a smc -start command on them. 

Is there such a thing that exist?  I was thinking about checking some registry paths or folders under program files, but depending on the version the registry paths are probably different and folders probably depend on whether it is a 32bit server or 64bit server. 

Any advise or locations of registry path to check?

Thanks!

Best thing to do with is from powershell, checked this? This is more realiable as it queries the WMI

https://gallery.technet.microsoft.com/scriptcenter/Get-The-Name-of-Installed-b10fd073

This is what I was talking about. Nice one !!

https://www-secure.symantec.com/connect/downloads/powershell-script-which-reads-list-systems-and-scans-their-registry-determine-what-version

would this work? because SEP default installation folder doesn't change in our network:

@echo off
IF EXIST "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection" goto x64
IF EXIST "C:\Program Files\Symantec\Symantec Endpoint Protection" goto x32

:x64
Title 64 BIT System
c:
cd\
cd "Program Files (x86)\Symantec\Symantec Endpoint Protection"
smc -start
goto end

:x32
Title 32 BIT System
c:
cd\
cd "Program Files\Symantec\Symantec Endpoint Protection"
smc -start

:end
pause

Yes, I dont see any issues on this, it should work

Best script I've found, works well:

https://gallery.technet.microsoft.com/scriptcenter/Symantec-Endpoint-8e47c450

Huge thumbs up Brian...that PS script is awesome!!

It really is. You'll need to modify some to fit your environment but really works great.