Intel,Altiris Group

Hi,
I am looking for a way that I can update virus defination to the clients who are connected to our server.
Currently I am updating the virus defination one by one to the clients. I would appreciate if anyone supports me in this regards,
Thanks,
Meraj

hi, using the sepm console, edit or add a new policy and set it for a group ( the client  in that group)

To configure a LiveUpdate Settings Policy
1 In the console, click Policies.
2 Under View Policies, click LiveUpdate.
3 On the LiveUpdate Settings tab, under Tasks, click AddaLiveUpdateSettings Policy.
4 In the Overview pane, in the Policy name box, type a name for the policy.
5 Under LiveUpdate Policy, click Server Settings.
6 In the Server Settings pane, use the default management server.
7 When you have configured your policy, click OK.
8 In the Assign Policy dialog box, do one of the following:
■ Click Yes to save and assign the policy to a group or location in a group.
Cheers
Pete

What version of Symantec have you installed and have you installed a SAV or a SEPM server?

All your clients should upgrade the defintiions automatic.

But you need to come with a little more info about your setup if you what some help.

Hi meraj2k, to update virus definitions.
You just configure a schedule for LiveUpdate.

For SEP Manager (server):
Policies > LiveUpdate > Add LiveUpdate Settings Policy
Then:
Select group to assign policy to.
Select a server from which to get the updates. By default, it gets it from the server or setup a LiveUpdate server connection.
Then select a schedule.

How to change a Symantec Endpoint Protection client from unmanaged to managed in MR1 and MR2.

Question/Issue:
How do you manually restore communications between a managed Symantec Endpoint Protection client and the Symantec Endpoint Protection Manager.


Solution:

Warning: The below solution is for MR1 and MR2 only. For MR3, see page 57 of the Symantec Endpoint Protection Administration guide for MR3.

The SylinkDrop tool and Sylink.xml can be used to switch an unmanaged client to managed. In the following example we work with the Temporary group. These same steps can be used to place clients in other groups you have created by replacing Temporary with the name of the group you want the client to belong to.

To copy the Sylink.xml from the Temporary group folder to the client

In Windows Explorer on the computer that runs Symantec Endpoint Protection Manager, browse to C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agent\.
In this location, there are two or more folders with 32-character alphanumeric names. Each folder represents a group in your Symantec Endpoint Protection Manager site. Inside of each folder is a file named LSProfile.xml.
Do not edit LSProfile.xml. Any edits to the LSProfile.xml file is not recommended or supported, and can cause serious communication problems.
Open the LSProfile.xml file in one of the group folders, and find the XML tag: <GroupInfo Name="X" where X is the name of the group.
Find which LSProfile.xml file specifies "Temporary" as the group name.
The folder that contains that file is the folder that represents the Temporary group.
In the Temporary group folder there is a file named Sylink.xml. Make a copy of that file and move it to the desktop of the client that you want to be managed.

To use the SylinkDrop tool to apply the Sylink.xml file
Copy the SylinkDrop.exe file to the desktop of the client you want to be managed.
This tool can be found on CD 2 of the Symantec Endpoint Protection 11 installation files, in the folder "\TOOLS\NOSUPPORT\SYLINKDROP". It can also be obtained from Symantec Technical Support.
Double-click SylinkDrop.exe.
When prompted to select a Sylink.xml file, select the Sylink.xml you saved to the desktop.


--------------------------------------------------------------------------------
Note: SylinkDrop.exe does not provide a progress indicator. Upon completion, it displays a window with the text "Sylink file has been successfully replaced."

I tried doing that but but the schedule tab was ALL geryed out unless I choose "use a live update server" from the server settings tab . . .???

Currently it seems all your clients are unmanaged.So i would suggest to have SEPM console and gets all your clients managedwith it.
SEPM is there in CD1 of the download

Thanks for information.
I have an other question. I want to know how can I manage the clients from unmanaged ???

I've tried to copy the syslink.xml on the client's desktop and SylinkDrop.exe Then run it and update SYLINKDROP.EXE
I get the message saying that Sylink file has been successfully replaced. But in the symantec endpoint icon in the taskbar remains unmanaged.

Kindly give step by step procedure.

Best Regards,
Meraj

Do the unmanaged clients already appear on the SEPM console? Create a group for them so that their incorporation to the domain would go smoothly. It would also take a few minutes for them to take effect depending on the SEPM update settings.

I re-create managed client package (with edited "client settings") and re-deploy to the site or workstations. I found that it's the easiest way to do it. 
But when you create the client package **make sure** you have the last option checked.
 

So the best way to avoid this is to migrate all to managed and then assign them to a folder/group for unmanaged and modify the policies to make it similar to an unmanaged client.

would that be a long cut solution Mon?
if not, what policies might we change for this?
thanks..

I just figured that it would be much easier to have the ability to manage all clients from the start and then modify those that you don't want to manage rather than start from the other side. Especially if you need to access that PC to make changes.

Hi, When I try to open D partition in my PC. Message appears saying Windows Script Host. Script: M.p.jpg. Kindly help me sort out this problem. Thanks, Meraj

Pls create a separate thread for your problem...