Endpoint Protection

 View Only

  • 1.  SEP - Clients PC Moving to New Domain - Impact in SEPM?

    Posted Apr 07, 2011 03:42 AM

     

    Hi,

     

    We are looking to move our desktops to another domain.  they currently have SEP installed and all working.  They will still have network connectivity to the SEPM servers, but will anything break?

     

    We have testing scheduled for Monday, but interesting to know if theres any migration steps?  Will everything look the same in SEPM or will I have duplicate entries for the clients?  Thier IP's are likely to stage the same, just the computers accounts migrated to anotehr domain/remove add to new doamin.

     

    thank you



  • 2.  RE: SEP - Clients PC Moving to New Domain - Impact in SEPM?

    Broadcom Employee
    Posted Apr 07, 2011 03:52 AM

    Are you changing the Microsoft domain or SEP domain?

    If Microsoft domain and SEPM will not change its name and IP, should not be any problem. If clients will have the possibility to contact the SEPM on the communication port (8014 by default), there will not be any problems.



  • 3.  RE: SEP - Clients PC Moving to New Domain - Impact in SEPM?

    Broadcom Employee
    Posted Apr 07, 2011 03:54 AM

    Hi,

    there will not be any change/break, except that on SEPM console you need to administer the new domain.



  • 4.  RE: SEP - Clients PC Moving to New Domain - Impact in SEPM?

    Posted Apr 07, 2011 09:08 AM

    Thats correct - only the clients are moving domain. SEPM is staying where it is (the desktops are moving into same domain as SEPM) - we dont have an LDAP or Ad integration for SEPM configuration.

     

    Thanks guys!



  • 5.  RE: SEP - Clients PC Moving to New Domain - Impact in SEPM?

    Broadcom Employee
    Posted Apr 07, 2011 09:11 AM

    No problems then :)



  • 6.  RE: SEP - Clients PC Moving to New Domain - Impact in SEPM?

    Trusted Advisor
    Posted Apr 07, 2011 10:05 AM

    Hello,

    Yes. I Agree. 

    Till the Time, the IP Addresses does not change, should not be any problem. Again, in your case SEPM is good, so I don't think there would be an Issue.

    I would still recommend you to take a Back-up of the Database and follow the steps provided in the Article below for Backup. (Just incase..)

     

    Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager
     
    http://www.symantec.com/business/support/index?page=content&id=TECH102333
     
     


  • 7.  RE: SEP - Clients PC Moving to New Domain - Impact in SEPM?

    Posted Apr 11, 2011 06:44 PM

    Seems to me if you only have shortnames in the MSL (Master Server List) in the SEPM you might have an issue.

    In each MSL, we use both the name of the SEPM and the IP. This improves reliability of the clients getting to the SEPM.  The MSL looks like this:

    Priority1

                    sepMservername1:8014

                    10.71.xx.xx:8014

    Priority2

                    sepMservernameTWO:8014

                    10.78.xx.xx:8014

     

    Also,  I assume these two domians will have trust in both directions.



  • 8.  RE: SEP - Clients PC Moving to New Domain - Impact in SEPM?

    Posted Aug 22, 2011 03:44 AM

    hi,

    what if i move symantec endpoint protection into new microsoft domain?

    the server will stay with the same name and IP but in a new microsoft domain

    do i have to configure anything?

    thanks