Change parent server on symantec anti virus client

Were you able to make any progress?  I can provide my scripts if you'd like.

Ok moved the Dat file over and it has picked up the new server but the clients do not appear in symantec system centre even after running client discovery.

Any ideas.

Thanks

THANKS

I'm not sure how contact "snoopfrogg" directly, but I'm in the same situation with parent servers, and I'd like to get a copy of the scripts you used to push the GRC files.

Something similar to this should work:

xcopy \\SAVserver\vphome\CLT-INST\WIN32\grc.dat "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5" /V/Q/Y

You'll need to modify the server name.  Also, I didn't throw this in a batch file, so test it out before you push it to your entire domain.

This what I was thinking of calling from the Login script:
************************************************************************************************
@echo off
REM Copies files from AV Server to client to point client to correct parent AV server
xcopy "\\DC-02\vphome\pki\roots\*.*" /e /s  "C:\Program Files\Symantec AntiVirus\pki\" /y
xcopy "\\DC-02\vphome\GRC.DAT" "C:\Program Files\Symantec AntiVirus\" /f /y
xcopy \"\DC-02\vphome\GRCGRP.DAT" "C:\Program Files\Symantec AntiVirus\" /f /y
****************************************************************************************************
How does this look? I'm not a scripting buff, but I'm trying to assimilate what I'm reading here. We're using SAV 10.2

That looks really similar to what I used to copy the GRC.dat and PKI certs.  

The one difference I notice is that I copy the GRC.dat file to the All Users profile while you're copying under C:\Program Files\Symantec AntiVirus.  I'm not sure if this has changed with 10.2- I'm running 10.1.5.5000.

Ah! Thanks for catching my bug there....
@echo off
ECHO ******** UPDATING YOUR PARENT AV SERVER ***************
xcopy "\\DC-02\vphome\pki\roots\*.*" /e /s  "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5" /y/v/q/f
xcopy "\\DC-02\vphome\GRC.DAT" "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5" /y/v/q/f
xcopy \"\DC-02\vphome\GRCGRP.DAT" "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5" /y/v/q/f

Also, regarding the moving the .cer files in the PKI directories, they should go into the pki\roots directory.  Here's the ariticle I pulled this from and the text below:

"Moving Symantec Client Security 3.x or Symantec AntiVirus Corporate Edition 10.x clients from one parent server to another"

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2005041111454648?Open&docid=2002101409403448&nsf=ent-security.nsf&view=pfdocs

To change the parent management server of a client manually when the servers are not in the same server group
1.  On the intended parent management server, copy the Grc.dat configuration file from the Symantec AntiVirus program folder.
The default location on a Symantec AntiVirus Corporate Edition server is <OS drive>:\Program Files\SAV.
The default location on a Symantec Client Security server is <OS drive>:\Program Files\SAV\Symantec AntiVirus.
For directions, see the directions in the "To find the Symantec AntiVirus program folder" section in the Technical Information section of this document.
2.  On the client computer, paste the Grc.dat file into the C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5 folder.
3.  On the intended parent management server, open the pki\roots folder and copy the xxx.x.servergroupca.cer file.
4.  On the client computer, paste the xxx.x.servergroupca.cer file into the pki\roots directory, which appears under the directory that contains the Symantec Client Security files.
5.  After a few minutes, the client finds the Grc.dat file, makes the appropriate changes to the registry, and then deletes the Grc.dat file.
The next time that the client checks in with the parent server, the client will appear in Symantec System Center. You can force the check-in by editing the registry on the client computer.

I'm assuming that the pki/roots directiry is the one under the "program file", not the "all users", since there isn't a pki folder under the "all users" area.

@echo off
ECHO ******** UPDATING YOUR PARENT AV SERVER ***************
xcopy "\\providenceeng.com\netlogon\SAVUpdate\6f01cb2dc0bca0428967717f6e3e9859.0.servergroupca.cer" "C:\Program Files\Symantec AntiVirus\pki\roots" /y/v/f/q
xcopy "\\DC-02\vphome\GRC.DAT" "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5" /y/v/f/q
xcopy \"\DC-02\vphome\GRCGRP.DAT" "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5" /y/v/f/q

Yeah, I think you're right.  Looks like this will take care of both the GRC and .cer files.