Endpoint Protection

We're in the process of upgrading from SEP 11 to SEP 12.  One of the issues we currently have is that there are a large amount of SEP 11 clients currently checking into our manager that are not actually managed by our IT department.  Due to policy changes we're planning on not upgrading these machines when we go to SEP 12 and no longer supporting them under our SEP Manager.  The question is if we don't upgrade them will they check into the SEPM once its upgraded from 11 to 12?  And if so, is there a way to block them from being able too?  Basically disable backwards compatibility within SEPM 12 to manage SEP 11 clients?

Thanks,

Mike

Hi,

After an upgrade from SEP 11 to SEP 12.1, all the connected existing clients will communicate with SEP 12.1

Hi,

List down all those clients through either IP address or hostname.

Prior to SEPM upgrade convert all those clients as an unmanned client, you can do it with the help of a Sylink replacer tool.

Check this article: How to convert Symantec Endpoint Protection clients from managed to unmanaged without uninstalling and reinstalling

http://www.symantec.com/docs/TECH104010

hi,

if you question is lot of sep client updated for sepm manager bot not showing sep console. 

Are you using Clone image OS ?

if yes please convert your sep client unmanaged to manage

Script Convert unmanaged system to Managed system

https://www-secure.symantec.com/connect/downloads/script-convert-unmanaged-system-managed-system

Image Installation System Problem

https://www-secure.symantec.com/connect/downloads/image-installation-system-problem

OR

you can use tool for unmanged to manage system

Using the "SylinkReplacer" Utility

http://www.symantec.com/docs/TECH105211

To get the SylinkReplacer version_12.1 Utility, you will have to call symantec or log a web case.

QuickStart Guide - Create and Manage Support Cases in SymWISE

http://www.symantec.com/docs/HOWTO31132

How to update a support case and upload diagnostic files with MySupport

http://www.symantec.com/docs/TECH71023

The question is if we don't upgrade them will they check into the SEPM once its upgraded from 11 to 12? 

If nothing else changes (i.e. SEPM is upgraded, not uninstalled and reinstalled with new communication certificate, etc.), yes.

And if so, is there a way to block them from being able too?

You could probably move them all to a new group, block clients from joining the group, then delete them from the client list.

Blocking clients from being added to groups
http://www.symantec.com/docs/HOWTO54730

You could also make them unmanaged, as noted above.

sandra

Hi SEP_FMI,

Any update on this ?

If you have received solution please don't forgot mark as solution please comments help you.

Are these going to be managed by a different SEPM? You can point them to a new one.