Unable to move SEP RU7 clients to new group running on Windows 7.
Hello Everybody,
I know there were lot of similar discussions happened before in Symantec forums. But still I couldn't find a way to solve the bellow mentioned problem.
Problem Description: I run SEP RU7(recently migrated). We have 2 test groups (GroupA and GroupB). GroupA has 10 clients in which 4 are Win7 machines and rest are WinXP. We wanted to test a script to move all these clients to GroupB.
The script is actually written to do the following-
Stop SMC service -> Remove sephwid.xml -> Delete the HWID registry key -> Delete Sylink.xml -> drop new Sylink.xml for the GroupB -> Start SMC service.
After running the script in test phase we found that all WinXP move to GroupB. However Win7 clients were still in GroupA.
When checked the registry entry, found that PreferredGroup key shows the GroupB but the client still reporting to GroupA in console.
Turned off UAC and performed the Sylink replacement process manually on one of the Win7 machine, Still no go.
Deleted the client from GroupA in SEPM. Restarted the SMC service on Win7 client and it worked. It communicates with GroupB now.
What is the correct procedure to move clients between groups?
Environment details: SEPM using remote SQL database.
Thanks.
Comments
since there are only 4
since there are only 4 clients, right click on all four clients (under the clients tab) and select move to group ( move to group B).
Testing phase
Hi,
I would love to do that but this is only in testing phase. However, I have more clients in production environment.
Thanks.
Hi
Hi
Are you using windows firewall or SEP firewall ?
Is it 64 bit win 7 ?
SEP Firewall
Hi,
I use SEP firewall. I have installed SEP with all three features (AVAS, PTP and NTP).
I also got both Win7 32bit and 64bit machines.
Thanks.
Hi
Hi
Try the script with only deleting the Sylink.xml and replacing the new sylink.xml .
Check it pls....
Already tried
Hi,
I already tried deleting the Sylink.xml and replacing with new one. But it didn't help either. Only then I thought HWID might be causing the issue and included removal of HWID into the script.
Thanks,
hi
Browse to the "C:\Program Files\Symantec\Symantec Endpoint Protection" folder
Delete sylink.xml, sylink.bak and sylinkex.bak
delete above files too
there is a inbuilt tool in tools folder called moveclients
u still want to use your script?
How to use SEP11.x Move Client Utility and Subnetgroups.txt script to move clients into a new group.
http://www.symantec.com/business/support/index?page=content&id=TECH97764
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
Managed to remove HWID
Thanks to all,
I managed to modify the script to remove the HWID and now the clients are moving to new group as desired.
Use Symantec Move Client Utility
I would recommend to use Symantec Move Client Utility which is located in the folder of Tools\NoSupport of SEP CD, very nice tool, it is VB script and you can modify it if you need, intruction on how to use the tool is simple and clear. You will need to run the tool from SEPM. but it is fast tool and all moved events are logged, it took only less than 10 minutes to move 3000+ clients. You can move the clients based on host name, IP or user name, etc.
I have found that if you use
I have found that if you use sylinkreplacer it moves clients well, however in some circumstances it will not.
Check the link below.
http://www.symantec.com/business/support/index?page=content&id=TECH103041
I have found some clients unmovable even when removing hardware ID's and sylink files.
In these few cases I have to move the clients in the SEPM Console.
You may also find the link below useful for clients above RU5
http://www.symantec.com/business/support/index?page=content&id=TECH96808
There is an additonal file to delete "Delete %programfiles%\Common Files\Symantec Shared\HWID\sephwid.xml"
Would you like to reply?
Login or Register to post your comment.