We help IT Professionals succeed at work.

How do I change Antivirus Client's Parent Server to point to Symantec's site instead?

2,576 Views
Last Modified: 2013-11-22
Server1: Running Symantec System center 10.1.0.394. Clients SAV 10.1.5 have this server as the 'parent server'.
Server2: Installed Symantec Endpoint (fresh install) on Server2. We have push-installed Symantec Endpoint Protection on new clients. We are not migrating.
Server1 is going to be retired very soon and would like all the existing clients that point to this 'parent server' to get their updates from the liveupdate site instead. These clients will slowly be upgraded to endpoint as we get to them.
How can I accomplish this?
I read articles about copying over the GRC.DAT and root certs to the clients however, we have 1000+ clients and will be a next to impossible task to do at this time.
Comment
Watch Question

Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION

Author

Commented:
We have deployed Endpoint on a different server and already added new clients. The old clients on Symantec System Centers is what i'm concerned about since we will be turning off the old server verys oon. When you said 'you can't convert a managed 10.1.5 client to unmanaged without reinstalling the client' If they were unmanaged could we then point out to Symantec site to get updates?
Yes, if they're unmanaged, they will download updates from Symantec. I'm not sure what you mean by "If" they were unmanaged; are you thinking of redeploying SAV 10.1.5 instead of SEP 11.0.4202?

Changing a Symantec AntiVirus client from managed to unmanaged
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/605cf2ef9b659d8e88256a22002724e2?OpenDocument

Author

Commented:
We are cutting over to SEP 11.0.4 soon.
What would you recommend we do given our scenario? we have 1000+ managed clients that are getting updates from the old SAV 10 server (soon to be retired) and will need for them to get their updates from the symantec instead. Is uninstallin/installing the client the only way to accomplish this? we couldn't use the Symantec System Center?
If you're not ready to start using SEP on all these, then I would recommend setting up System Center Console and SAV on a third server. If you install it into the existing group, you won't have to copy a new certificate to all the PCs. You can probably drag and drop most of the clients to the new server, then make it the primary server.
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.