Migrate Symantec Anti Virus to Symantec Endpoint Protection

Document ID: 2007071909500548

What should I think about in advance before I begin migrating my Symantec AntiVirus environment to Symantec Endpoint Protection?
Consider several factors before you begin your migration:

  • Do you have the resources to create a test migration environment?
    If you create such an environment is highly beneficial before you begin migration so that you can test exactly how clients and servers are grouped, which settings are migrated, and the overall migration success rate.
  • Can you perform a complete migration to Symantec Endpoint Protection?
    If your network contains operating systems (such as Netware) that are not supported with Symantec Endpoint Protection, then Symantec System Center must manage a subset of the clients and servers.
  • Do you want to create a new client groupings or use the existing groupings from Symantec System Center?
  • How do you plan on migrating Symantec Endpoint Protection to your clients? Do you plan to use third party tools or the Migration and Deployment Wizard?
  • After you determine the method that you want to use to migrate your clients, you can determine whether to use certain Symantec Endpoint Protection features.
  • Are there client settings that you must disable or reconfigure to ensure successful migration?
  • Some client settings such as scheduled scans must be disabled before you begin migration.

Before you begin migration, you must read the migration chapters in the Installation Guide for Symantec Endpoint Protection and Symantec Network Access Control.

What are the general steps to migrating Symantec AntiVirus to Symantec Endpoint Protection?
You must complete the following steps to migrate Symantec AntiVirus to Symantec Endpoint Protection in the order listed:

  1. Uninstall the Reporting Sever if you have it installed.
  2. Use Symantec System Center to configure settings for the management server and clients that prepare them for migration.
    These settings changes are: disable scheduled scans, modify Quarantine purge options, delete histories, disable LiveUpdate, disable roaming, unlock server groups, and disable Tamper Protection. Install the Symantec Endpoint Protection Manager.
  3. Migrate your legacy clients and servers.
  4. Uninstall Symantec System Center
  5. Migrate the legacy client or server that was used to protect the computer running Symantec System Center.

Change the logon screen of Windows Server 2008

After installing windows server 2008, you can choose the user with whom you want to logon (see the picture below).

W2K8 LogonScreen

Offcourse this is not desirable for many company’s and you should turn this off. Take the following steps to do this on a stand alone server:

  1. Logon to the server
  2. Click Start, Run and type secpol.msc, enter
  3. If you get a security warning, continue
  4. Go on the left to Local Policy, and then choose Security Policy
  5. On the right pane, enable the “Interactive Logon: Do not display last user name” 
  6. Log off

When logging off and pressing CTL+ALT+DEL you need to type in your username and password like the screen below:

W2K8 - LogonScreen

 

 

Performance Troubleshooting for VMware vSphere 4

Performance problems can arise in any computing environment. Complex application behaviors, changing demands, and shared infrastructure can lead to problems arising in previously stable environments. Troubleshooting performance problems requires an understanding of the interactions between the software and hardware components of a computing environment. Moving to a virtualized computing environment adds new software layers and new types of interactions that must be considered when troubleshooting performance problems.

The attached document is the first installment in a guide covering performance troubleshooting in a vSphere environment. It uses a guided approach to lead the reader through the observable manifestations of complex hardware/software interactions in order to identify specific performance problems. For each problem covered, it includes a discussion of the possible root-causes and solutions. Topics covered include performance problems arising from issues in the CPU, memory, storage, and network subsystems, as well as in the VM and ESX host configuration. Guidance is given on relevant performance metrics to observe using the vSphere Client and esxtop in order to isolate specific performance issues.

This first installment of Performance Troubleshooting for VMware vSphere 4 covers performance troubleshooting on a single VMware ESX 4.0 host. It focuses on the most common performance problems which affect an ESX host. Future updates will add more detailed performance information, including troubleshooting information for more advanced problems and multi-host vSphere deployments.

vsphere4-performance-troubleshooting.pdf

source

Create user account in Symantec System Center 10.x

To create a user account for a server group

  1. Start Symantec System Center.
  2. Right-click the appropriate server group.
  3. Click Account Management.
  4. In the Configure Server Group Accounts dialog box, click Add.
  5. In the Account Setup dialog box, do the following:
    • Type the user name.
    • In the New password box, type the password.
    • In Confirm password box, type the password again.
    • Under Account Type, check the role that you want to assign to the user: Read-only, Administrator, Central Quarantine, or Gateway Security.
  6. Click OK.
  7. Click Finished.
    The changes are then sent to the secondary management servers in the server group.

source

How to change the password in Symantec AntiVirus Corporate Edition 10.x

Document ID: 2005041217010148

About the server group password
The “Remember this user name and password for me” check box saves a password so that you do not have to enter it the next time the server group is opened. Also, if you “Automatically unlock this Server Group when I start the Symantec System Center,” the password is saved in a secured cache.

To no longer save the server group password

  1. In the Symantec System Center console, in the left pane, right-click a locked server group, and then click Unlock Server Group.
  2. Uncheck Remember this user name and password for me.
  3. Uncheck Automatically unlock this Server Group when I start the Symantec System Center.
  4. Click OK.
  5. Exit the Symantec System Center console.
  6. When you are prompted to save, click No.

The server group is now configured to prompt for a password, and the server group will not be unlocked automatically when you start Symantec System Center.

Reset the Symantec System Center admin user password
You can use the Password Reset Utility to reset any user’s password. You must have Administrator access to the primary server of the server group.

To reset the Symantec System Center admin user password

  1. On the computer running Symantec System Center, start Windows Explorer.
  2. Go to \Program Files\Symantec\Symantec System Center\Tools.
  3. In the right pane, double-click the IFORGOT.exe file.
  4. In the Primary server field, type the name of the server group’s primary server.
  5. In the user field, type admin
  6. In the New Password and Confirm New Password fields, type the new password.
  7. Click Reset Password.
    You may be prompted for a Windows user name and password if you specify a remote server.

For information about creating and managing user accounts in Symantec System Center, see the document Using Symantec System Center roles in Symantec AntiVirus 10.x and Symantec Client Security 3.x.

Use a client uninstallation password
It is possible to configure the client component of Symantec AntiVirus to request a password before allowing a user to uninstall it. By default, this feature is enabled, but often the password is not set by an administrator. When the client can communicate with the server, the password can be reset or disabled.

To require a password before uninstalling

  1. In the Symantec System Center console, right-click a server, a server group, or a client group, and then click All Tasks > Symantec AntiVirus > Client Administrator Only Options.
  2. On the Security tab, check Ask for password to allow uninstall of Symantec AntiVirus Client.
  3. Click Change.
  4. In the Configure Password dialog box, type a new password, and then confirm by typing the password again.
  5. Click OK, and then click OK again.

If the client system needs to be uninstalled but can no longer communicate with the parent server, please contact Symantec Technical Support for assistance.

Use a client network scan password
In a networked environment where most, if not all systems are running some form of antivirus software, it is inefficient to allow the systems to perform real-time or manual scanning of network resources. In such a setting, the network resources are already protected by the local antivirus system. However, it may not be desirable to completely disable this functionality as you may want to remote scan a system at a later date. The best solution is to implement a password known only to the system administrators that prevents casual scanning of network resources, while leaving it available as a useful tool. If the client system can still communicate with the parent server, the password can be reset or disabled.

To require a password before uninstalling

  1. In the Symantec System Center console, right-click a server, a server group, or a client group, and then click All Tasks > Symantec AntiVirus > Client Administrator Only Options.
  2. On the Security tab, check Ask for password to allow scan of Mapped Network Drives.
  3. Click Change.
  4. In the Configure Password dialog box, type a new password, and then confirm by typing the password again.
  5. Click OK, and then click OK again.

Install windows 2003 Server on a Dell Latitude E6500

When you try to install windows 2003 server onto a dell laptop, it will crash during the dos setup.

This is because the Hard disk mode has the wrong type. Change the hard disk mode in the bios of the system to ATA and try again.

When booting press F12
Select BIOS
Change Hard disk mode to ATA
Reboot, and install Windows 2003 Server