Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Using the Agent Mover with the Login Script Utility in OfficeScan (OSCE)

    • Updated:
    • 17 Oct 2016
    • Product/Version:
    • OfficeScan 11.0
    • OfficeScan XG.All
    • Platform:
    • Windows 10
    • Windows 10 32-bit
    • Windows 10 64-bit
    • Windows 2003 32-Bit
    • Windows 2003 64-Bit
    • Windows 2003 Datacenter 64-bit
    • Windows 2003 Enterprise
    • Windows 2003 Server R2
    • Windows 2003 Standard 64-bit
    • Windows 2008 32-Bit
    • Windows 2008 64-Bit
    • Windows 2008 Datacenter
    • Windows 2008 Datacenter 64-bit
    • Windows 2008 Enterprise
    • Windows 2008 Enterprise 64-bit
    • Windows 2008 Server R2 Enterprise
    • Windows 2008 Standard
    • Windows 2008 Standard 64-bit
    • Windows 2008 Web Server Edition
    • Windows 2008 Web Server Edition 64-bit
    • Windows 2012
    • Windows 2012 Datacenter R2
    • Windows 2012 Enterprise
    • Windows 2012 Enterprise R2
    • Windows 2012 Server Essential R2
    • Windows 2012 Server Essentials
    • Windows 2012 Standard
    • Windows 2012 Standard R2
    • Windows 2016
    • Windows 7 32-Bit
    • Windows 7 64-Bit
    • Windows 8 32-Bit
    • Windows 8 64-Bit
    • Windows 8.1 32-Bit
    • Windows 8.1 64-Bit
Summary

Utilize the Agent Mover (IPXFER.EXE) and AUTOPCC.exe commands in login scripts to transfer OSCE agents from one OSCE server to another via the Login Script Utility. The commands can also be used to reestablish client connection with an existing server.

Details
Public

Use the ipxfer.exe utility in OSCE login scripts by adding the command to existing scripts or the ofscan.bat file.

To create the login script, refer to the Installing OfficeScan clients using Login Script KB article.

If you already have an existing login script, Login Script Setup appends a command that executes AutoPcc.exe. Otherwise, OSCE creates a batch file called ofcscan.bat that contains the command to run AutoPcc.exe.

  1. Determine the location of the login scripts by referring to The Windows Server 2003, 2008, and 2012 Scripts.

    Default ofcscan.bat locations on the Domain Controller:

    • Windows Server 2003
      • \\[Windows 2003 server name]\system drive\windir\sysvol\[domain DNS name]\scripts\ofcscan.bat
    • Windows Server 2008
      • \\[Windows 2008 server name]\system drive\windir\sysvol\[domain DNS name]\scripts\ofcscan.bat
    • Windows Server 2012
      • \\[Windows 2012 server name]\system drive\windir\sysvol\[domain DNS name]\scripts\ofcscan.bat
  2. Open the login script file for editing in Notepad.

    Login Script Setup appends the following line to the end of the script:

    \\<OSCE Server name or IP Address>\ofcscan\autopcc.exe

     
    • <Server_name> is the endpoint name or IP address of the OfficeScan server endpoint.
    • "ofcscan" is the OfficeScan shared folder name on the server.
    • "autopcc" is the link to the autopcc executable file that installs the OfficeScan agent.
  3. Modify the login script file to replace the autopcc.exe command call with the following lines:
    • For 32-bit clients:

      @echo off

      \\<Server name or IP Address>\OFCSCAN\Admin\Utility\IpXfer\ipxfer.exe -s <server name> -p <server listening port> -c <agent listening port> -d <domain or domain hierarchy> -e <Certificate location and file name> -pwd <agent unload and unlock privilege password>

      \\<Server name or IP Address>\OFCSCAN\\autopcc.exe -f -u

      @echo on

    • For 64-bit clients:

      @echo off

      \\<Server name or IP Address>\OFCSCAN\Admin\Utility\IpXfer\ipxfer_x64.exe -s <server name> -p <server listening port> -c <agent listening port> -d <domain or domain hierarchy> -e <Certificate location and file name> -pwd <agent unload and unlock privilege password>

      \\<Server name or IP Address>\OFCSCAN\\autopcc.exe -f -u

      @echo on

    ParameterExplanation
    -s <server name>The name of the destination OfficeScan server (the server to which the OfficeScan agent will transfer).
    -p <server listening port>The listening port (or trusted port) of the destination OfficeScan server. To view the listening port on the OfficeScan web console, click Administration > Settings > Agent Connection in the main menu.
    -c <agent listening port>The port number used by the OfficeScan agent endpoint to communicate with the server.
    -d <domain or domain hierarchy>The agent tree domain or subdomain to which the agent will be grouped. The domain hierarchy should indicate the subdomain.
    -e <Certificate location and file name>

    Imports a new authentication certificate for the OfficeScan agent during the move process. If this parameter is not used, the OfficeScan agent automatically retrieves the current authentication certificate from its new managing server.

    Default certificate location on the OfficeScan server:

    \\<Destination Server name or IP Address>\ofcscan\Pccnt\Common\OfcNTCer.dat

    When using a certificate from a source other than OfficeScan, ensure that the certificate is in Distinguished Encoding Rules (DER) format.

    -pwd <agent unload and unlock privilege password>

    The unload and unlock privilege password configured in Privileges and Other Settings.

     
    If the unload and unlock password is required and you do not provide the password, Agent Mover prompts you before attempting to move agents.

    Examples:

    ipXfer.exe -s Server01 -p 8080 -c 21112 -d Workgroup –e \\NewOSCEServer\ofcscan\Pccnt\Common\OfcNTCer.dat

    ipXfer_x64.exe -s Server02 -p 8080 -c 21112 -d Workgroup\Group01

    The Autopcc.exe -f and -u switches trigger a forced update of the client/agent if an agent is already installed.

  4. Save the changes to the login script.

    When the login script runs, the OSCE client is pointed to the server specified in the ipxfer command parameters. The autopcc command will force client machines to update / upgrade to the OSCE version of the destination server.

Premium
Internal
Rating:
Category:
Deploy
Solution Id:
1114446
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.