Endpoint Protection

Symantec Antivirus 10.1.8.8000, on Widows 2003 R2 SP2. SAV on the PCs was in the image used on them. They are essentially unmanaged clients because they do not see the parent server. They are left to haphazardly manually update virus defs using Live Update. Is there a way to make them managed clients of the SAV server without uninstalling and reinstalling SAV? If there isnt, can SAV be pushed out from the server?

Thank you. Thank you very much.

 Called symantec and ask for Makedrop utility ..with thsi utlity you can make clients managed based on IP address list or subnet.
You can run this tool from server itself.

Using the "MakeDrop" utility 
http://service1.symantec.com/SUPPORT/ent-security.nsf/ppfdocs/2008053014333748

Changing a Symantec AntiVirus client from managed to unmanaged

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2000072808055648

I used the MakeDrop utility (I had to tell the Global Support rep where to find it) It worked very nicely, thank you. But there are client machines that do not show up in the SSC. I tried to use the procedure in this support document,

To stop and restart the Symantec AntiVirus services

1. Stop the Symantec AntiVirus services in the following sequence:
   • Symantec System Center Discovery Service
   • Intel Alert Handler
   • Intel Alert Originator
   • Intel File Transfer
   • Intel PDS
   • Symantec AntiVirus Server
     In Symantec AntiVirus 9.x and later, the service name is Symantec AntiVirus.
   • Symantec Quarantine Agent
   • Symantec Central Quarantine
2. After all the services are stopped, restart the services in the following sequence:
   • Symantec AntiVirus Server
     In Symantec AntiVirus 9.x and later, the service name is Symantec AntiVirus.
   • Intel PDS
   • Intel Alert Handler
   • Intel Alert Originator
   • Intel File Transfer
   • Symantec Quarantine Agent
   • Symantec Central Quarantine
   • Symantec System Center Discovery Service

but there are no such services that I could find:

• Symantec Quarantine Agent
• Symantec Central Quarantine

 you can just stop Symantec antivirus and Symantec antivirus definition watcher service that is enough.
Then replace the root certificate and paste the grc.dat in c:\doc & set..\all user\app..data\.......\7.5

then start both the services that is enough.

Check if the firewall is disabled or port 2967 is open.

the quarantine agent and central service will be there on compute having Quarantine server and Console installed so it can be ignored.