WelcomeProducts & ServicesSecurity ResponseSupportSolutions & IndustriesLicensingTrainingStore
Enterprise
Symantec.com > Enterprise > Support > Knowledge Base


Moving Symantec AntiVirus Corporate Edition 8.x and 9.x clients from one parent server to another

Question/Issue:
You installed Symantec AntiVirus Corporate Edition 8.x and 9.x clients as a managed client of a Symantec AntiVirus server, and now you want to move the client or clients to a different parent server.


Solution:


Before you begin: If you are using Symantec Client Security 3.0 or Symantec AntiVirus Corporate Edition 10.0, these directions may not work.
Read the document Moving Symantec Client Security 3.0 or Symantec AntiVirus Corporate Edition 10.0 clients from one parent server to another.



There are several different options for moving clients from one parent server to another. If you are using Symantec System Center 6.0 (which ships with Symantec AntiVirus Corporate Edition 9.x) you can switch parents using the Symantec System Center. If you are using version 8.x or higher you can use the Client Mover tool from the CD-ROM. To modify clients directly you can copy the Grc.dat file from the new parent server directly to a client. To update all clients that report to a parent server you can modify the registry of the old parent server or copy over a read-only Grc.dat file to use the old parent server to migrate clients to the new parent server. See the sections that follow for more specific information.


Use the Symantec System Center 6.0 to move clients
If you are using Symantec System Center 6.0, you can simply drag clients from their current parent server and drop them onto the new parent server.
For more information, read How to use the Symantec System Center 6.0 to move clients from one parent server to another.

Client Mover tool
The Symantec AntiVirus Corporate Edition CD-ROM contains an unsupported tool known as the client mover. This tool is designed to assist you with changing the parent server of clients in an easy to use interface.


Note: SAVClientMover.exe is an unsupported tool. This information is provided for your convenience only. Symantec Technical Support cannot provide support for the troubleshooting of SAVClientMover.exe.



The tool can be found on the CD-ROM at the following location:

<CD>:Tools\NOSUPRT\CMOVER\SAVClientMover.exe


Copy the Grc.dat directly to the clients
If you want to move a few clients to a different server, then copy the Grc.dat file from the new parent server to all the clients that you want to be managed by the new parent server. This can be done through many distribution methods, the most common being logon scripts.

Where to find the Grc.dat file on the parent server

Note: If you want to move the clients to a different parent server and also add them to a specific client group, use the Grc.dat file from the directory \SAV\Groups\<groupname>, where <groupname> represents the name of the client group.



Where to put the Grc.dat file on the 9.x client
Copy the Grc.dat file to the appropriate folder for your operating system: Where to put the Grc.dat file on the 8.x client
Copy the Grc.dat file to the appropriate folder for your operating system: Where to put the Grc.dat file on the 7.x client
Copy the Grc.dat file to the appropriate folder for your operating system:

Note: On Windows 2000/XP, the directory "Application Data" (C:\Documents and Settings\All Users\Application Data) is hidden. For instructions on configuring Windows Explorer to display hidden directories, see the document How to show hidden files and protected operating system files in Windows.



After a few minutes, the Symantec AntiVirus client will find the Grc.dat file in this folder. Symantec AntiVirus will make the appropriate changes to the registry and will delete the Grc.dat file.


Note: If you do not uninstall the Symantec AntiVirus server software from the original parent server, then client computers may show up in the Symantec System Center under both servers for 30 days. The old Symantec AntiVirus server retains the client's information in its cache for 30 days after it stops receiving "keepalive packets" from that client. To remove these client entries, select and delete them in the Symantec System Center.



Edit the old parent server registry to redirect clients to a different parent server
If you want to move all clients to a different parent server, then changing the registry on the original parent server will update the grc.dat to automatically direct clients to a new parent server. If the current parent server is no longer functioning, then use the Grc.dat method.


WARNING: Back up the system registry before you make any changes. Incorrect changes to the registry could result in permanent data loss or corrupted files. Make sure that you modify only the registry keys that are specified.



To edit the parent name in the registry
  1. Go to the following registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LanDesk\VirusProtect6\CurrentVersion\ClientConfig\

  2. Change the "Parent" name to the computer name of the new parent server.
  3. Change "RemoteHomeDirectory" name to the new parent server.
  4. Change "AlertDirectory" name to the new parent server.
  5. Close the Registry Editor.
  6. Open Symantec System Center.
  7. Right-click the original parent server, and then click All Tasks > Symantec AntiVirus > Client Realtime Protection Options or Client Auto-Protect Options.
    If the clients are in client groups, right-click the client group instead of the parent server. You will need to do this for each client group.
  8. Click Reset All.
    This will generate a new copy of the Grc.dat file that refers clients to the new parent server.

When the clients check in to the original parent server, they will receive the configuration change and begin communicating with the new parent server. If you stop and then restart the Symantec AntiVirus server service or reboot the original parent server, then the Grc.dat file will again refer clients to the original parent server. Any clients that did not receive the configuration change will still be managed by the original parent server.


Note: If you do not uninstall the Symantec AntiVirus server software from the original parent server, then client computers may show up in the Symantec System Center under both servers for 30 days. The old Symantec AntiVirus server retains the client's information in its cache for 30 days after it stops receiving "keepalive packets" from that client. To avoid or solve this problem, see the document How to adjust the time-out value for automatically deleting clients from the Symantec System Center Console.



Copy a read-only Grc.dat file to the old parent to redirect clients to a different parent server
You can substitute the Grc.dat file from the new parent server with the Grc.dat on the old parent server to redirect clients to the new parent server without having to alter the registry. To accomplish this simply take a read-only copy of the Grc.dat from the new parent server and replace the Grc.dat on the old parent server. The Grc.dat file must have the read-only attribute before it is placed on the old parent server to prevent overwriting or alteration of the file. With the file in the proper location it will be used by the old parent server as the source of configuration information (including parent server) for the clients when they check in. Clients will then be redirected to the new parent server and should not check in with the old parent again. After the clients have migrated to the new server the read-only Grc.dat on the old parent server should be removed.


WARNING: Placing a read-only copy of the Grc.dat file on the old parent server prevents it from being able to properly manage clients. You should only leave the read-only Grc.dat file if you plan to decommission the old parent server. If you remove the read-only Grc.dat then a new one will be generated and the server will then be able to properly manage clients.



Where to find the Grc.dat file on the parent server

Note: If you need to move the clients to a different parent server and also add them to a specific client group, use the Grc.dat file from the directory \SAV\Groups\<groupname>, where <groupname> represents the name of the client group.





Technical Information:
To find the VPHOME shared folder

  1. On the Windows taskbar, click Start > Run.
  2. In the Open box, type the following text:

    cmd

  3. Click OK.
  4. At the command prompt, type the following command:

    net share

  5. Under Share name, find the VPHOME listing.



 

Available Translations:



Document ID: 2002101409403448
Last Modified: 02/08/2006
Date Created: 10/14/2002
Operating System(s): Windows 98, Windows Me, Windows NT 4.0 SP6a, Windows 2000 Professional, Windows XP Professional Edition
Product(s): Symantec AntiVirus Corporate Edition 8.0, Symantec AntiVirus Corporate Edition 9.0
Release(s): SAV 8.0 [All Releases], SAV 8.1, SAV 9.0 [All Releases]


Site Index · Legal Notices · Privacy Policy · · Contact Us · Global Sites · License Agreements
©1995 - 2012 Symantec Corporation