Pushing GRC.dat file to the clients of another Server

[openeratech]

Hi,

I have a requirement where i want to push the GRC.DAT file from one SAV server to the clients of another SAV server.

Is there anyway where i can push it from Server itself. I have seen GRCDrop.exe, but that has to be run from client. I want to run from server.

I dont want to take the help of login script, i have my own issues with this technique.

Is there something i can do on this?

Thanks
Yunus

 

[Stiddy]

All you really have to do is copy the grc.dat file from the parent server's vphome share to a local directory on your box and then run the following from the command line or if you are doing multiple machines then build a batch program using 'for.exe' to read in a text file of machines to run the commands on.


sc \\%1 net stop "Symantec Antivirus Client"

xcopy D:\TEMP\grc.dat "\\%1\c$\docume~1\all users\applic~1\symantec\norton~1\7.5"

sc \\%1 net start "symantec Antivirus Client"

HTH - Stiddy

 

[oggywan]

There is no need to restart the Symantec Antivirus service to process the GRC.DAT. After copying over the GRC.DAT you should set the following registry value to 1.

Give it a moment, and the GRC.DAT will disappear (which means it was processed) and Symantec Antivirus will automatically set the registry value back to 0:

HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\ProductControl\ProcessGRCNow

But yes... depending on what you want to accomplish with the GRC, you may want to restart the service just to give Symantec AV a kick in the butt.

As far as pushing a GRC.DAT to multiple workstations, I like Stiddy's idea to use a script, but add some elegance by using a free deployment tool: If you check out the TOOLS\NOSUPPRT folder on a recent Symantec Antivirus CD, you should find a program called the Symantec Packager and a program called GRCDROP.EXE

You can use Symantec Packager to automatically run a script (aka custom command) as Stiddy suggested and push that to a list of IP-address/Computers using the packager. GRCDROP.EXE will assist you in copying the GRC.DAT to the correct folder, rather than a hardcoded Norton Antivirus/7.5 folder. This is extremely useful if you happen to be dealing with a mixture of Norton Antivirus CE clients and newer Symantec Antivirus CE clients.

I found the following document on the Symantec website that may be of assistance:

Using Packager to deploy a Symantec AntiVirus policy that changes the clients' Parent Server

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2003040215011148

Hope this helps.