How to use the MoveClient Utility to switch multiple machines between computer and user mode.

Products

• Endpoint Protection

Issue/Introduction

You have multiple clients within your Symantec Endpoint Protection environment which you need to switch from computer mode to user mode, or vice-versa. You are looking for a faster way to accomplish this versus changing them on a one-by-one basis within the Management Console.

Resolution

Symantec provides an unsupported tool which can accomplish this task on a per-group basis known as the MoveClient Utility. It is highly recommended to review the included instructions (provided in PDF) before utilizing this tool. 

Warning: The MoveClient Utility, along with the below instructions, are unsupported and are provided for convenience only. Before using this tool or following these steps, it is strongly recommended that the Symantec Endpoint Protection Manager and database be backed up in accordance with our disaster recovery guidelines. Symantec Support is unable to provide direct assistance with use of the tool or issues that arise out of its use.

 

1. Locate the MoveClient Utility within the Symantec Endpoint Protection installation files. The tool is located in the Tools\NoSupport\MoveClient_Utility folder. For information on how to obtain the latest version of the client installation files, review the following article: Download the latest version of Symantec software.

 

2. Copy the MoveClient.vbs file to a folder on the server which acts as your Symantec Endpoint Protection Manager (SEPM). If you have multiple SEPMs which share the database, this tool only needs to be copied onto one of them.

 

3. Edit the MoveClient.vbs in a text editor, such as notepad. Modify the DBUser and DBPass lines to reflect the appropriate credentials to log into your database. If you are not certain of these, please consult with your Database Administrator. In addition to supplying the database credentials, ensure that the OnlyCheckClientsInTempGroup is set to False.

 

4. Create a new text file in the same folder as the MoveClient.vbs named SwitchClientGroups.txt.

 

5. Edit the SwitchClientGroups.txt and specify the groups you want to switch modes for in the following manner. Each group must be specified on its own line.

To move clients to user mode:

ToUser,<Group Name>

To move clients to computer mode:

ToComputer,<Group Name>

For subgroups, backslashes must be used :

<Group Name>\<Subgroup Name>

Note that you do not need to specify the default group, "My Company," in these directives.

There is a file called Sample-SwitchClientGroups.txt included with the tool which provides detailed examples. You may use this to base your directives upon.

 

6. Execute the MoveClient.vbs script. When it is complete, it will write a log to the same folder which will report on the results of the script. The name of this log is MoveClients.Log.