We just did a complete reinstall of Symantec Endpoint Protection Manager.

Keep in mind we did a reinstall of SEPM before we updated it. But, on a search for unmanaged computers on my network, it turns up nothing. The only way I can find anything is to to a search by computer, I put in my test workstation and it finds it, I run the deploy and it installs. A few things to note, I do not have  a green dot on my symantec icon in the system tray that I assume shows a connection to SEPM, also when I used to delpoy an install to a workstation it was a background install and the user couldn't tell at all what was happening. Now when I deploy an install to a client, its totally in the forground,  I think you even have to click next a couple times for it to work. Any ideas?

Is the client not successfully connecting to Live update? I performed the SEPM install yesterday, and the client says its virus definition file is from from 3 days ago. I checked SEPM and it has downloaded virus definition files even today.

The better way is as per the link I gave you.  You install the update to the server, upgrade the client packages and then the clients will detect the new packages and auto-update.

Having followed the path you have taken, I don't see any other eway that to perform the un-install / reinstall manually.

If you built the client packages with the option to install silently then they should not display - if you chose unattended then the install is visible to the user.

SEP Choices when creating deployment packages.

So do you think I need to reinstall SEPM or just rerun migration and deployment wizard?

To achieve what?  Silent install or migration of existing?

The latter is not possible, the former can be achieved by re-creating client packages.

Migrating, so I do need a reinstall?

I think you are too late to migrate - you blew that when you re-installed rather than upgraded the server.

So what should my next step be?

Did you backup the SEP database before you reinstalled SEP?

Not manually, I thought the backups were done automatically. Where would I look for the backup?

The default location is x:\program files\symantec\Symantec Endpoint Protection Manager\data\backup\

Ya it must get deleted during an uninstall, or it just doesn't back up automatically.

"Keep in mind we did a reinstall of SEPM before we updated it. But, on a search for unmanaged computers on my network, it turns up nothing. The only way I can find anything is to to a search by computer, I put in my test workstation and it finds it, I run the deploy and it installs. A few things to note, I do not have  a green dot on my symantec icon in the system tray that I assume shows a connection to SEPM, also when I used to delpoy an install to a workstation it was a background install and the user couldn't tell at all what was happening. Now when I deploy an install to a client, its totally in the forground,  I think you even have to click next a couple times for it to work. Any ideas?"

Do you know why no unmanaged computers come up, is it because they have the old install? Or why my SEP on my test isn't dling anything from liveupdate? My SEPM downloaded updates are current, but the workstation is not talking to SEMP event those I successfully installed that client from SEPM.

Your clients are managed by your old installation which you uninstalled, so there won't be any unmanaged clients to find.  You will need to remove / re-install them to get them talking to your new installation.

Workstations are set to talk to your old installation, so they cannot communicate as the old installation no longer exists.

If you had not uninstalled and re-installed but upgraded, you would be in much better shape.

Ok I understand I need to do manual uninstall/reinstall of the new client, but any idea why LiveUpdate isn't working? The SEP on my test workstation is about 2 or 3 days behind which is when I installed, but SEPM is current as of today.

Sometimes you have to manually download the latest file from symantec to get it going (in my experience).

Is liveupdate allowed to run on the client?

Visit http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=savce to download the latest definitions.

As you can tell I'm new to Symantec, but I went to control panel then LiveUpdateConfiguration. It is set to Express Mode which is supposed to be automatic correct?

Liveupdate is controlled by SEP.  What have you set in SEPM?

It says its set to run live update every 4 hours, under liveupdate source servers  its set to use default symantec liveupdate server, but nothing is listed?

I use both the default management server and a Liveupdate server.

I am also set for every 4 hours.

My clients can manually launch LiveUpdate and also download product updates from LiveUpdate.

My LU works happily.

Did you have to set up a Liveupdate server? Or is that a symantec ip you put in?

No LU server and no IP's.

Default Management Server is your own server and the LiveUpdate server is the Symantec server.

OK I set that up. I uninstalled SEP on my test workstation. Then I did a search for a specific unmanaged computer, which is my test workstation. That showed up. I installed the SEP to the test workstation and it was supposed to install the default group, but after is says successful I don't see the client in my group, and I don't have  a green dot on the SEP client on the test workstation.

Has the client rebooted and has it run the basic scan yet?

I rebooted and scanned for viruses and I still don't think I'm connected to SEPM. Also the Proactive Threat Protection section says Waiting for Updates and has been stuck there for a while. I dont think it's getting it's updates.

It's also not showing up in My company or Default group, which is where it was supposed to have been installed to.

Is there a firewall that is turned on at the client?

Windows firewall, but I cant change it unless I change the GPO. But it should work, windows firewall was enabled when some of the clients were still working before the reinstall.

Can you run through this SYmantec document to check your settings please.

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/bea3f0b2b47def4d8825737e005a8833?OpenDocument

Ya ran through that, it all looks good. I did a search for unmanaged computers but used My company as the domain instead of my actual domain, My workstation showedup in Unknown computers section, not unmanaged. Can I do anything about that, get an unknown into one of my groups?

Have you deleted the old SEP client installation packages and generated new SEP client installation packages?

Did you install the unknown client from the new Installation Package?

I deleted the old SEP client. Then I went into SEPM did  search for Test, found it listed under unmanaged computers. I installed SEP from SEMP in computer mode to Default Group. I went over to my Test machine it installed well, I rebooted, the policy update change worked well and everything is current. I checked my Default group and the computer wasn't listed. So i did another search for Test in Find Unmanaged Computers, this time it wasn't listed under unmanaged it was listed under unknown. It's no where in My Company, or My Group. I'm sorry I'm taking up so much of your time Alanhadisty.

Does this article help:

http://seer.entsupport.symantec.com/docs/305171.htm

All of that work, even deploying SEP to the client works. The problem is after the SEP installs to the client it never shows up on SEPM and if I do another search for unmanged computers, the client I just installed SEP to will show up as unknown rather than the previous unmanaged