Endpoint Protection

Hi,

Performing an 'Import' of the Sylink.xml file fails to change the group membership of the SEP Client.

According to the below link, it is not supported, but, I have been using the 'Import' functionality to change groups since last 2 years without issues.

https://www-secure.symantec.com/connect/app#!/forums/sylinkxml-updated-client-not-changing-groups

Can someone please confirm?

We are using 12.1 RU6 MP1.

Thanks,

Jimmy

=-=-=

That should work fine. Have you also tried with sylinkdrop? Or pushing from the SEPM?

It's just not possible to change group membership of a managed client by injecting a new sylink.xml. The "PreferredGroup" option in the sylink.xml file will only be used if there is no client registered in the SEPM database. See SMLatCST's posting here.

To be on the safe side, I tried it in my environment and it didn't work, as supposed.

To move clients, you can use the SEPM GUI or the moveclient.vbs tool (see tools\NoSupport folder in the SEPM DVD/.iso file).

Thanks guys!

We were able to move clients from one group to another using the Import option within the SEP Client.

However, recently, after upgrading from 12.1 RU4 to 12.1 RU6, we observed it does not work.

I could not find an article explicitly stating that moving between groups is not supported.

Will try the VB Script now.

-Jimmy

=-=-=

I knew at one point it worked, but, I guess not now in the newer versions. Support would know for sure but if you found an easier/quicker way then more power to you.

My comments, as Greg12 linked, still stand.

Changing the sylink.xml file does not change the group in which a SEP client resides on the SEPM (and really should never have done).  Whatever the SEPM believes to be the configuration, takes precedence over the client's view as it always should (who'd want users to be able to choose how the client is configured?)

The only time reaplcing the sylink file will also cause a SEP Client to use the preferred group instead of the group assigned by the SEPM, is when the HWID is also cleared at the same time.  In this case, the client appears to be a brand new entity to the SEPM, so it happily accepts the PreferredGroup option.

All in all though, MoveClient is recommended.