Problem

On a Symantec Endpoint Protection (SEP) 12.1 client, when you try to replace the sylink.xml file manually by copying it into C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.x.x.x\data\config, you receive error message and you are unable to copy in the file.

Error

Access is Denied. Make sure that the disk is not full or write protected.

Cause

This behavior is expected. In SEP 12.1, Tamper Protection prevents direct modification of Symantec files.

Solution

Use one of the supported methods below to replace the sylink.xml file on a SEP 12.1 client machine.

Method 1:

Replace the Sylink file with the help of Sylinkdrop utility. This utility is now located in the installation folder for the SEP client, under C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.x.x.x\Bin\Sylinkdrop.exe.

(Note: The actual folder name for 12.1.x.x.x will vary dependant upon the build of the product installed. For example, the RTM build will be 12.1.671.14971.105.)

Method 2:

Import the file through the GUI of the the SEP client.

  • From within the SEP GUI, click on Help.
  • From the Help menu, select Troubleshooting.
  • On the Management Screen (the initial screen of troubleshooting), under Ccommunication Settings, click the Import… button.
  • Select the Sylink.xml file you wish to use, and then click OK.

After following these steps, it may be necessary to restart the Symantec Management Client service on the client machine.

  • From the Windows Desktop. click on Start, and then select Run.
  • Type smc -stop into the run line and then click OK.
  • Wait for the shield icon to disappear from the system tray.
  • From the Windows Desktop. click on Start, and then select Run.
  • Type smc -startinto the run line and then click OK.

Note: The SylinkReplacer utility, which was used in version 11.x to replace the Sylink.xml file on remote machines, does not properly work with SEP 12.1 and cannot be used.


Tags: