Author: gunnalag

Uninstall SAV uninstall SAV through from ARP (Add or Remove Program) uninstall LiveUpdate via ARP and delete LiveUpdate service          C:>sc delete LiveUpdate          [SC] DeleteService SUCCESS          C:> verify all the Symantec and LiveUpdate services got deleted or delete them manually reboot if needed, ideally not necessary. Install SEP push SEP via SMDW with custom client package verify all SEP services are running and client got the latest defs/policies Upgrade SEP/Install Patch: ———————————————————————————— The client cache must be present when you install a patch for Symantec Endpoint Protection 11.x ———————————————————————————— < p>If you install a patch for Symantec Endpoint […]

Read through the Symantec documents for SEP upgrades for specific versions Release Update Features and/or Release notes documentation see if there are any issues reported in SEP forums or on internet, for the version that you are planning to upgrade to After getting through understanding of the upgrade version, you can follow below steps to proceed with the upgrade: Upgrade steps: Backup location: C:Program FilesSymantecSymantec Endpoint Protection Managerdatabackup Verify that current/existing setup is up-to-date Use dbvalidator.bat Verify that two sites are replicated latest with no errors See if there are any Liveupdate errors C:Program FilesSymantecLiveUpdate Check C:Program FilesSymantecSymantec Endpoint Protection […]

Read Using the command-line interface section in administration_guide.pdf which explains all basic logging tasks for SEP client SEP Client Log File: C:Program FilesSymantecSymantec Endpoint ProtectionSyslog.log Enabling debug logging: C:>"Program FilesSymantecSymantec Endpoint ProtectionSmc.exe" -stop C:>reg add "HKLMSOFTWARESymantecSymantec Endpoint ProtectionSMC" /f /v smc_debuglog_on /t REG_DWORD /d 1 C:>"Program FilesSymantecSymantec Endpoint ProtectionSmc.exe" -start Check the Debug log file: C:Program FilesSymantecSymantec Endpoint Protectiondebug.log Remotely drop SyLink.xml file: C:>psexec \TESTPC1 -s C:tempSylinkDrop.exe -silent C:tempSyLink.xml PsExec v1.5 – execute processes remotely Copyright (C) 2001-2004 Mark Russinovich www.sysinternals.com Sylink file has been successfully replaced. C:tempSylinkDrop.exe exited on TESTPC1 with error code 0. < p>C:>