Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 636 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Moving a protected client

PeterT

I have Sophos Endpoint Security Control running on a Windows 2003 Server and protecting a number of XP clients.

I now need to move one of my clients out of this domain to another domain which also has Sophos Enpoint Security and Control.

In order to continue to protect this XP client my plan is to

  1. Delete the Client from the Sophos Endpoint Security Group it is currently in so it won't get any more updates from the original Server.
  2. Take the client out of its original Windows domain.
  3. Join the new domain.
  4. Get the new Server's Endpoint Security and Control to Find the client (by the option of importing the details from Active Directory).
  5. Protect the client.

Have I forgotten anything ? e.g. Do I have to uninstall the client's original Sophos installation before I can protect it from the new Server ?

Thanks

            Peter

:18649


This thread was automatically locked due to age.
  • 0

    Hello Peter,

    protection from the new server should work without uninstalling first. I assume the Sophos security groups will be correctly rebuilt and populated (sorry, can't test).

    Delete the Client from the Sophos Endpoint Security Group it is currently in

    If a client is deleted from SEC its policies will neither disappear nor revert to some default setting thus it will continue to work and update as before. Furthermore delete just "hides" the client - i.e. you will neither see it nor will SEC attempt to contact it if you for example change its former groups policies - but leaves the entry in the database. If the client contacts the management server (because it is still running) it will be unhidden in SEC and appear in its original place.  

    So I'd suggest you just leave step 1 out.

    Christian

    :18653
  • 0

    Thanks for that Christian,

    the move worked out a lot easier than I thought.

    As soon as the client joined the new domain it appeared in the Sophos Enterprise Console display so I didn't need to "Find" it.

    It was Unassigned so I moved it into a Group and the policy kicked in.

    As far as I can see it is all working.

    As you said, there was no need to re-install the application.

    Peter

    :18717