Video Screencast Help

[SEP11+Win7Pro] From centrally managed to personally managed

Created: 04 Jul 2014 • Updated: 15 Oct 2014 | 14 comments
This issue has been solved. See solution.

I have the following problem. I have SEP11 installed on my laptop. Until few weeks ago, my SEP was centrally managed by an administrator of my group. I left the group and now I have to manage my SEP on my own, that is I need to revert it to an unmanaged SEP so that I can manage its policies myself, but I have no idea how to do it, even because I have no more contacts with the original group I do not belong to anymore.

What I have to do? I am the admin of my laptop, of course, and I have all privileges.

Thank you in advance

Operating Systems:

Comments 14 CommentsJump to latest comment

consoleadmin's picture

Replace the sylink to make it unamange

How to regain policies for unmanaged client after converting it from managed
padding: 1px;padding-bottom: 3px ;font: 12px Arial; text-align: left;">Article:TECH92877 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 0px;font: 12px Arial; text-align: left;">Created: 2009-01-13 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 1px;font: 12px Arial; text-align: left;">Updated: 2009-01-23 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 1px;font: 12px Arial; text-align: left;">Article URL

Thread -


James007's picture

If you don't have SEPM management you can't take revert back policy under your control.You can reinstall SEP client and iinstall unmanaged client.

chin_aust's picture

Have you the password of smc to stop it?

Step to make it unmanage without the Server access.

Click Start -> Run -> input command “smc  -stop”(Password screen display if password attach)

Enter the password to stop it.

Locate to “C:\Program files\Symantec\Symantec Endpoint Protection\”, use Notepad to edit the sylink.xml file, delete the content and save. Then the sylink.xml file will be a empty file.

Delete the sylink.bak and sylinkex.bak file in the same folder

Click Start -> Run -> input command “smc  -start”

Dario de Judicibus's picture

I did what you suggested but a lot of settings are still locked. How can I unlock them? And where are policies? Thank you in advance.

SMLatCST's picture

You might want to take a look at the below article:

How to regain policies for unmanaged client after converting it from managed
Article:TECH92877  |  Created: 2009-01-13  |  Updated: 2009-01-23  |  Article URL

Note that this article does talk about grabbing a file from the original install media.  Also, it's worth bearing in mind that your machine may no longer be covered by your former group's license (assuming by group you mean employer).

Dario de Judicibus's picture

Mmmm... my system is already unmanaged (I installed it from SEP11_0_6200_Unmanaged_32Bit_setup.exe) but I also installed a set of policies that I want to change now. I do not know how to do it. 

SMLatCST's picture

It sounds as if the unmanaged client installer included custom policies (which locked some settings down).

The way to restore your ability to manage the settings locally is to import the unlocked policies.  The article I linked earlier tells you how to do that.

It's also possible to import policies that were exported from another SEP client:

How to Export and Import a Symantec Endpoint Protection client policy
Article:TECH190053  |  Created: 2012-05-31  |  Updated: 2012-06-07  |  Article URL

The issue is that both methods require you to have access to either the default installation media from Symantec FileConnect, or to a SEP Client that has the settings you need.

Also note, the version of SEP you installed (SEP11RU6MP2 from the looks of it) will no longer receive defs after 5th January, so you'd be better off getting a license and upgrading to SEP12.1 (current latest version if RU5).

Dario de Judicibus's picture

Well, as I told you, I installed it from a setup file ( SEP11_0_6200_Unmanaged_32Bit_setup.exe ) that is still on my computer. So I have it. Is it ok?

Dario de Judicibus's picture

PS There are standard (default) policies? For example, in the setup file?

SMLatCST's picture

The default policies are present in the client installer available on Symantec FileConnect site.

As I mentioned earlier, the problem is that the client installer in your possession sounds like it has custom policies in it already, which have replaced the default ones.  Therefore, you need a copy of the original installation media (or access to a SEP client that is already running the configuration you need) in order to replace these custom setting with the default ones.

Dario de Judicibus's picture

OK, I think that the better solution is to purchase a license of latest version. I wonder if Symantec has an education plan for schools.

SMLatCST's picture

As far as I can tell, each transaction is individually assessed, so you'll have to contact Symantec or a reseller to find out pricing.