Using big fix to replace symantec endpoint sylink.xml

Content Authoring
1

(imported topic written by lions185591)

Ok,

I have several clients that needs to have a new sylink.xml file inside c:\program files\symante\symantec endpoint protection . However, in order to copy this file symantec requires to stop the local client symantec client.

Symantec Management Client is the service that is continuosly accessing this file, so to replace the file, you must stop the smc service.

I have been testing using this command but without any luck.

dos C:\PROGRA~1\Symantec\SYMANT~1\smc.exe -stop

dos robocopy “\network-sharefolder\sylink.xml” " C:\PROGRA~1\Symantec\SYMANT~1 " /MIR /V /NP /Z /R:10 /W:30

dos C:\PROGRA~1\Symantec\SYMANT~1\smc.exe -start

Any ideas how can I acomplishes this task using BigFix?

2

(imported comment written by BenKus)

Hi lions,

Your problem is almost certainly related to the fact that the BigFix Agent runs as SYSTEM and thus cannot access the network share (which requires user credentials unless it is a null-session share).

Instead, it is probably best to use BigFix to deploy the file rather than copy it from the share (plus you get nice things like relay distribution, bandwidth throttling, etc.)

The easiest way to do this is probably to use the BigFix Software Distribution Wizard (which will upload the file for you and make it available to the agents) and incorporate your actionscript into the final Fixlet.

Ben

3

(imported comment written by lions185591)

I’m fairly new with fixlets and creating software distribution. Could you please provide an example(s) for this task?

Thanks

4

(imported comment written by BenKus)

Hi lions,

You just need to find the software distribution wizard and it will make the Fixlet for you. (Look in “All Content” > “Wizards”)

Ben

5

(imported comment written by lions185591)

I created a software distribution targeting the source folder where the two files, sylinkdrop.exe and sylink.xml, are located.

The task created an action script that says blah, blah,

extract fix.tmp

wait __Download\sylinkdrop.exe -silent sylink.xml

I conducted a test the new software distribution, and it ran without any issues. Bigfix reported task completely successfully. But, when I took a look at the computer been target, it was like nothing ever took place. The sylinkdrop needs to replace the sylink.xml on the target computer. Perhaps, the execution went so fast that it did not give enough time for the sylinkdrop.exe to do its job.

How can I add a wait time for the task to be completed successfully? I was thinking adding an additional step, like a if statement, that will check if the file has been replaces or something on that area.

Thanks

6

(imported comment written by MattBoyd)

I think you need to reference the __Download folder in the path to sylink.xml

wait __Download\sylinkdrop.exe -silent

__Download\

sylink.xml

7

(imported comment written by lions185591)

It seems to be working!

Thanks