How to create a script to replace SyLink.xml file in client computers

Not sure why jncadmin is using UNC path for the target since NET STOP and NET START is done locally already. Perhaps this is what is was meant.

@ECHO OFF
NET STOP "SERVICE NAME"

COPY \\server\share\SyLink.xml "c:\Program Files\Symantec\Symantec EndPoint Protection\" /y

NET START "SERVICE NAME"

If you put the batch file and the SyLink.xml file in the same directory like the GPO sysvol. Then change the source to reference the current directory using %~dp0

@ECHO OFF
NET STOP "SERVICE NAME"

COPY %~dp0SyLink.xml "c:\Program Files\Symantec\Symantec EndPoint Protection\" /y

NET START "SERVICE NAME"

Thanks for the reply guys.

Amzaingtech, do you think i should add 'Sleep' after stopping a service before the copy command and after the copy command?

If you read this link you can see the same thing what we discussing here. https://forums.symantec.com/syment/board/message?board.id=endpoint_protection11&thread.id=3218
But my problem is i am not able to figure out the script properly to run.

Thanks

Qman

Put in a sleep in to make sure the services and copy has finished. Put this batch file, sleep and SyLink.xml in the same folder. NET STOP would possibly been more brute force. This is exactly what the last post on your link is.

@ECHO OFF
"c:\Program Files\Symantec\Symantec Endpoint Protection\smc" -p "password" -stop
%~dp0SLEEP 10
COPY %~dp0SyLink.xml "c:\Program Files\Symantec\Symantec EndPoint Protection\" /y
%~dp0SLEEP 10
"c:\Program Files\Symantec\Symantec Endpoint Protection\smc" -start


The second last post is using a file with the workstation names to get which workstation to run the script on. Copies the files (SylinkDrop.exe and sylink.xml) to the workstation's C: drive and runs sylinkdrop.exe remotely on the workstation using PSEXEC.EXE (Microsoft tool formerly from sysinternals). This is C or C++ code. It can be changed to a batch file.

Let us know and someone can convert it for you.

Amzaingtech,

Thanks for your reply and i am getting some error. Let me tell you what i did.

I saved the below commands which you said to a notepad as sep.bat file.

@ECHO OFF
"c:\Program Files\Symantec\Symantec Endpoint Protection\smc" -p "password" -stop
%~dp0SLEEP 10
COPY %~dp0SyLink.xml "c:\Program Files\Symantec\Symantec EndPoint Protection\" /y
%~dp0SLEEP 10
"c:\Program Files\Symantec\Symantec Endpoint Protection\smc" -start

Put sleep.exe, sep.bat and Sylink.xml to a folder called 'Symantec Script' in the server and shared the folder.

Went to a client computer and opened the shared folder and double clicked on sep.bat. I got below error.

cmd.exe was started with above path (which is the path to my file server) as the default directory.
UNC paths are not supported.
Defualting to windows directory.

Can you please tell me whats the problem?

Thnx

Qman

This is a standard error message when running a batch file from a UNC path. It's telling you it cannot set the working directory to '\\servername\sharename\folder' so it will default to local windows directory.

The command should run properly since we're not using working directory and specifiying full path by using the %~dp0 variable.

Amazingtech,

This time i saw some more details for the error i said in my earlier post. Acually i am getting the below error when i run the script.

cmd.exe was started with above path (which is the path to my file server) as the default directory.
UNC paths are not supported.
Defualting to windows directory.
The network path was not found
The network path was not found
The network path was not found

As you can see 3 times i am getting the error 'The network path was not found'

Further how can i run the same when a user is logged to the machine and as usual he dont have admin rights on the machine?

Regards
Qman

Oh I think you have spaces in your network path?

Can you also remove the @echo off?

Unfortunately, you need to be admin for the user to run it from their workstation.

You can push these changes from your workstation to their workstation.

"c:\Program Files\Symantec\Symantec Endpoint Protection\smc" -p "password" -stop
"%~dp0SLEEP" 10
COPY "%~dp0SyLink.xml" "c:\Program Files\Symantec\Symantec EndPoint Protection\" /y
"%~dp0SLEEP" 10
"c:\Program Files\Symantec\Symantec Endpoint Protection\smc" -start
pause

                                              

1:
2:
3:
4:
5:
6:

Download PSEXEC from Microsoft.

To be easier put all these files in a folder on your local HD say C:\Files. PSEXEC.EXE, SLEEP.EXE, SyLink.xml and the attached code in a .bat file.

START - RUN
CMD
C:
CD \Files
ss.bat {Workstation Name}

You could also create a workstation list file and run this from the command prompt.
FOR /F %a in (Computers.txt) do ss.bat %a

Probably need to add more logic to determine whether or not the workstation has already been updated.

PSEXEC \\%1 "c:\Program Files\Symantec\Symantec Endpoint Protection\smc" -p "password" -stop
SLEEP 10
COPY SyLink.xml "c:\Program Files\Symantec\Symantec EndPoint Protection\" /y
SLEEP 10
PSEXEC \\%1 "c:\Program Files\Symantec\Symantec Endpoint Protection\smc" -start
                                              

1:
2:
3:
4:
5:

Hi Amzingtech,

Thanks for your help till now. Is there any option to run the application on client machines not having administrator privilages? I have more than 100 clients and its not easy to go to each machine and login as administrator and run this script.

Regards
Qman

Do you have VB6?

Hi Amazinggtech,

No i dont have VB6. If i can get it, whats the use? Some other options?

Thanks in advance.

Wman