Endpoint Protection

Our SEPM server crashed and unfortunately (go ahead and tell me "I told you so"), we didn't have a backup. I was toying with the idea of moving back to unmanaged clients anyway, but it looks like I'm being forced to do it now.

What's the easiest way to force all my clients to switch back to unmanaged? I tried using SylinkDrop.exe to replace the Sylink.xml file on a test machine with the one from the install media. The Liveupdate button stays gray on the client until I change the LiveUpdate settings in the registry. The buttons lights back up, but when I run LU, I get the message that everything is up to date. This isn't true though. The definitions are listed as over a month old.

HELP!!!

Thanks everyone!

Is this client managed?

Can you check if your SEPM has the downloaded the Definitions..

admin

servers

click on site

select show liveupdate downloads
check if you latest defs downloaded.

if it has latest definitions / remove liveupdate from the client
delete liveupdate folders
install LU from CD1
Do a repair of SEP from add/remove programs
click on update policy

P.S: if the client is managed the liveudpate button will be grayed out ; you need to enable that in the manager
sepm
policies
liveupdate policy
select symantec liveupdate server
select allow users to launch liveupdate; this will enable the button

when u lauch the liveupdate by clicking the button ; it will go to internet for liveupdate and not to the parent server :)

There is no SEPM server anymore, it crashed. So none of those options are available to me. So *all* of my previously managed clients are now orphaned.

The best way is to Install a sepm
and then use the sylink replacer tool found there.
take the sylink file from any new group u create in SEPM;
the tool has the option to search the network; the replace would be done in 30 mins or less than that.

https://www-secure.symantec.com/connect/downloads/sylinkreplacer-tool-connecting-sep-clients-sepm

I really don't want to go back to a managed solution. I really want to go unmanaged, simply because there's no one here who has the time to administer the system.

I want to take an orphaned client and restore it to "pristine" unmanaged condition. I need it to pull scheduled updates from Symantec's LU servers. I need to do this with the smallest amount of impact to end-users as possible. I want to do it remotely, and sliently.

Replacing sylink wil change the group only, however liveudate policy stil be the same.
install a new manager
use the sylink replacer to connect to the manager
once connected; change the liveupdate policy to enable for your clients; you can set that under policies
once all done ;you can  unistal the manager

2) install manager
create a new package ; export it as Unmanged
push it to all your cleints
whatever is confortable and easier for u

The best option will be installing SEPM and connecting back all the clients.You can use any one of the following method for it.
How to point Symantec Endpoint Protection(SEP) clients to a new Symantec Endpoint Protection Manager after you have either uninstalled, are going to decommission or replace the Existing Primary Symantec Endpoint Protection Manager (SEPM).
If you replace the sylink also for getting the old policied removed you have to do registry changes .So if you want to keep them as unmanged clients only it is better to reinstall with unmanaged package....

Thank you all for the input. I guess we'll just install a new server, push with SylinkReplacer, and any new installs will be unmanaged.

Thanks again!

:) just for your info this is how you create unmanged info
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/a5146874e7b6a6178825747f006d3462?OpenDocument