8 Replies Latest reply on Jul 22, 2010 12:24 PM by tesdall

    Migrating and Installing

      We are moving users to a "new" server. Before we can move them we must remove the old one, refurb it and then reinstate it. Once its installed i have to uninstall the Viruse Scan on the machine and then push it back out to the machines to get all the options correct.

       

      can someone tell me how to keep all the exceptions even though im going to be uninstall the virus scan? can i save some reg files or anything like that?

       

      Thanks.

        • 1. Re: Migrating and Installing
          dmeier

          The only real way to do that, is to install McAfee Installation Designer  (MID), and create a configuration file based on "current settings".  The resulting vsecfg.cab file will have the configs embedded, and you could then place that in the c:\program files\mcafee\virusscan enterprise\mid folder, on the new install, and it should have the same configs at that point.

           

          It would be a reasonable Feature Modification Request (FMR), to have the ability to export/import VSE configs from within the console.

           

          - David

          1 of 1 people found this helpful
          • 2. Re: Migrating and Installing

            do you know if someone puts an exception into VSE were its saved. So i could write a script to capture only a select couple of users who had placed exceptions in?

             

            Reg, a file, anywhere?

            • 3. Re: Migrating and Installing
              dmeier

              It's all registry based:  HKLM\Software\McAfee\   Where  under there, depends on what kind of exception you are talking about.  OAS, ODS, ScriptScan, EmailScan, Buffer Overflow, Access Protection... etc.

               

              - David

              1 of 1 people found this helpful
              • 4. Re: Migrating and Installing

                i think the only exceptions people have setup here are in the on-demand scan. I also think i found the location. Now i just have to write a script to check for anything that was added after the server exceptions. Thanks for your help.

                 

                Location : HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VSCore\On Access Scanner\McShield\Configuration\Default

                 

                Im going to write a kixscript that checks for Exceptionitem_4 if it hits on that, then they have added their own exception.I will add them to a list and do them manaully.

                 

                Thanks for everything.

                 

                This code works.

                 

                [code]

                Break on

                ; Declare variables to prevent scope creep
                Dim $InFile, $OutFile   ; file names for input and output
                Dim $Computer    ; computer name, from input file
                Dim $Rc     ; return-code catcher
                Dim $Version    ; Version data from Computer

                $Rc = SetOption('NoVarsInStings', 'On')

                $OutFile = ('c:\test\mexceptions\exceptions.txt')
                $InFile  = ('c:\test\mexceptions\computers.txt')

                ; Open the input file - no strings in quotes!
                If Open( 1 , $InFile) <> 0
                  'Failed to open ' $InFile ' - aborting!' ?
                  Exit 1
                EndIf

                ; same for the output file
                If Open( 2 , $OutFile, 5) <> 0
                  'Failed to open ' $OutFile ' - aborting!' ?
                  Exit 1
                EndIf

                ; Read the first line, then loop until EOD (End Of Data) error
                $Computer = ReadLine(1)
                While Not @ERROR

                  'Computer: ' $Computer ?  ; display the current computer

                  ; Only read the registry if the computer is online
                  If Ping($Computer, 0) >=0
                    $Version = Readvalue('\\' + $Computer + '\HKLM\SOFTWARE\\McAfee\VSCore\On Access Scanner\McShield\Configuration\Default', 'ExcludedItem_4')
                  Else
                    $Version = 'PC Not Online'  ; no ping response
                  EndIf

                  ; If the registry data is blank, provide appropriate message
                  $Version = IIf($Version, $Version, 'Invalid data from PC')

                  'Version: ' $Version ?  Display version

                  $Rc = WriteLine(2, $Version + ',' + $Computer + @CRLF)

                  $Computer = ReadLine(1)

                Loop

                $Rc = Close(1)
                $Rc = Close(2)

                function Ping($Computer,$GetIP,optional $LoopCount,optional $TimeOut)
                if $GetIP
                  dim $ip, $ipfile, $
                  $ipfile = @scriptdir + '\ip.txt'
                  shell '%Comspec% /q /e:1024 /c for /F "tokens=2 delims=[]" %%i IN ('+ chr(39)
                  + '"ping ' + $Computer1 + ' -n 1 | find "]""' + chr(39) + ') do echo %%i >"' + $ipfile + '"'
                  $ = open(10,$ipfile,2) $ip = readline(10) $ = close(10) del $ipfile
                  if $ip
                   $Ping = $ip
                  else
                   $Ping = 'Bad IP address ' + $Computer + '!'
                  endif
                  exit 0
                else
                  if $TimeOut
                   for $c = 0 to $LoopCount
                    shell '%Comspec% /C ping ' + $Computer + ' -n 1 -w ' + $TimeOut + ' | find /C "TTL=" > nul'
                    if @error = 0
                     $Ping = 1
                     exit 0
                    endif
                   next
                  else
                   for $c = 0 to $LoopCount
                    shell '%Comspec% /C ping ' + $Computer + ' | find /C "TTL=" > nul'
                    if @error = 0
                     $Ping = 1
                     exit 0
                    endif
                   next
                  endif
                  $Ping = 0
                endif
                endfunction

                {/code]

                 

                 

                Message was edited by: tesdall on 12/30/09 12:27:13 PM CST
                • 5. Re: Migrating and Installing
                  dmeier

                  Sounds like you have what you need.  Just be sure to determine if it's On-access, or On-demand.  You mentioned on-demand, but pasted an on-access registry location.

                   

                  - David

                  • 6. Re: Migrating and Installing

                    You answered my origanl questions, but where would the on demand be located in the registry. I don't see it.

                    • 7. Re: Migrating and Installing
                      dmeier

                      It should be under HKLM\Software\McAfee\DesktopProtection\Tasks\{GUID}

                      1 of 1 people found this helpful
                      • 8. Re: Migrating and Installing

                        I eneded up running the script only on servers in our company. Once i found all of the exceptions i then exported them all to a CSV file and made sure to add all of them back into the new EPO since it was a wipe and reload.