It is necessary to convert an unmanaged Symantec Endpoint Protection (SEP) for Macintosh client into a managed client.
Export communications settings (sylink.xml) from the target client group within the Symantec Endpoint Protection Manager (SEPM), then copy it to the Desktop of the Macintosh you wish to make managed.
In SEP 12.1 there is a SyLinkDrop tool that can be used to copy the sylink.xml file to the SEP Macintosh client. This tool is installed along with the SEP Macintosh client in the Symantec folder: /Library/Application Support/Symantec/SMC/tools/SyLinkDrop. It can also be found in the product source files under \Tools\SylinkDrop\Mac, but this version may not be as up-to-date as the one installed with the SEP client (See SyLinkDrop for Macintosh generates an error "Fail to replace Sylink file").
The SyLinkDrop tool is installed with the SEP 14 for Mac client in the /Applcations/Symantec Solutions directory.
The SyLinkDrop version used must match the SEP for Mac client version. The tool from 12.1 RU4 and RU5 will not work to convert older SEP clients, and vice-versa. This is due to differences in the SEP master service that SyLinkDrop tries to restart after replacing the sylink.xml - see Technical Information below on how to manually stop/start the smclient or symdaemon.
For all versions of SEP, you may also manually place the sylink.xml file into the appropriate folder on the Macintosh client computer per the following instructions:
SEP 14.2 RU2: /Library/Application Support/Symantec/Silo/MES/SMC
SEP 14.2 RU1 MP2 and older: /Library/Application Support/Symantec/SMC
(See image below). NOTE: there are multiple Library folders on Mac systems, the correct one can be found in Finder>Go>Computer in the computer's hard drive.
If the SEPM console is not accessible, the sylink.xml file can be obtained using the instructions provided in the document 'How to change a Symantec Endpoint Protection client from unmanaged to managed in MR1 and MR2.' (see link below), substituting "Temporary" for the name of the group that the Macintosh client should join.
From Terminal command line:
For 12.1 RU2 and earlier, to stop and start the smcdaemon:
sudo /Library/StartupItems/SMC/smclient --stop (Note: There is a space after sudo and before --stop)
sudo /Library/StartupItems/SMC/smclient --start (Note: There is a space after sudo and before --start)
For 12.1 RU4 and newer, to stop and start the symdaemon:
sudo launchctl unload /Library/LaunchDaemons/com.symantec.symdaemon.*plist
sudo launchctl load /Library/LaunchDaemons/com.symantec.symdaemon.*plist