Endpoint Protection

I'm sure these have really simple solutions but I'm under pressure and can't think of them, so I'm hoping you guys can help out again.

I've created an install package containing all the features of SEP and it's approx. 73Mb in size. Is this the usual size? The reason I'm asking is because the Symantec rep told me it should be around 90Mb (which is what got me thinking that half the features were missing in the first place!)

I'm unable to move certain clients. Some of them are fine, others aren't and there doesn't seem to be any logic to it. The Symantec rep (who is now ill btw - I hope it wasn't me and all my questions!) told me to take off AD replication which I did, but it made no difference - there's no 'move' command when I right click.

I can't delete certain policies that were automatically created when I attempted to replicate with an old management server. Can these be deleted?

Is it possible to scrub the structure and start again? When this first went in there were a lot of fingers in the pie and the SEPM console reflects this. I'd like to start afresh and create a usable structure...

Thanks for any help you can offer
Gill

1. Whatever feature you select the package size will be same as it contains all features but installs only selected one. In MR5 its 90 mb ealier i was around 60-73 so it should not be a problem.

2.If you have added OU's and AD in SEPM you will not get that command. Remove all OU's and delete manually added clients.

3.Default policies cannot be deleted they are hard coded to fatabase. you can assign and Un-assign the policies to groups.

4.If you want to start fresh. Install SEPM--create groups.Export Client packages and export them to the clients.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009091711210648

In MR4 it aws 76 Mb
In MR4MP2 it was around 86
In RU5 it is around 98

Yes you can delete all groups and then the clients will move to the default group and then you can create new groups and move the clients accordingly.

Thanks for all your help. I apologise for the delay in replying, I have several hats to wear at the moment.

I am using RU5, but the 'all features' package size is still only 73Mb. I currently have all the network threat protection policies disabled, but even when I briefly enabled them to create another package it didn't make much difference to the size. Should I be worried?

Just to make sure I'm understanding this correctly, if I delete the auto-created AD group, all my clients will automatically be moved to the default folder? Then I just move them to the new structure I've created? I'm a bit worried that they'll be orphaned and I'll be creating more work for myself. All my servers are in this structure and I can't afford the downtime\manpower needed to correct any mistakes. I'm sure you all understand.

The extra policies are a pain, but I can live with them. Like you say, I don't need to use them.

If I can move my clients to make them more manageable then I won't need to reinstall SEPM, thankfully! But thanks for the tips.

Gill

You can remove the AD structure and the clients will move to Default group. The clients that are not communicating with sepm to make them communicate you do need any manpower/downtime if you have the sylinkreplacer tool.
https://www-secure.symantec.com/connect/downloads/sylinkreplacer-tool-connecting-sep-clients-sepm

The package size and the features you selected ,there is no relation.While you ate selecting certain features as far as I know it will actually do some modification in the SETAID.INI file
ref:MSI command line reference for Symantec Endpoint Protection 11.0

Thanks for the reassurances and the link to the sylinkreplacer tool; that's going to save me a lot of bother should everything go horribly wrong!

Thanks to everyone who replied, I really appreciate all your help.

Gill

Just to let you all know,  I copied all the machines from my AD structure to the places I wanted them in the new structure, then deleted the AD group. As far as I can see, the machines are still where I put them yesterday - so far so good!

I also moved the machines from the imported structure of my old av server and deleted that; I was then able to delete the policies that had been imported along with that.

The package size remains a mystery but I refuse to worry about it! The machines that have been installed with it appear to have everything, so I guess I was stressing over nothing.

Thanks to everyone who posted.
Gill