Upgrading Windows clients by using AutoUpgrade in Symantec Endpoint Protection

Article:HOWTO80780  |  Created: 2012-10-24  |  Updated: 2014-09-21  |  Article URL http://www.symantec.com/docs/HOWTO80780
Article Type
How To


Upgrading Windows clients by using AutoUpgrade in Symantec Endpoint Protection

The AutoUpgrade process lets you automatically upgrade the Symantec Endpoint Protection client software for all the Windows clients that are contained in a group. For example, you can use AutoUpgrade to upgrade clients to a new release update or product version.

Use the following best practices for using AutoUpgrade:

  • You must test the AutoUpgrade process before you attempt to upgrade a large number of clients in your production network. If you do not have a test network, you can create a test group within your production network. For this kind of test, you add a few non-critical clients to the test group and then upgrade them by using AutoUpgrade.

  • If you upgrade from 11.0 and use Application and Device Control, you must disable the Application Control rule Protect client files and registry keys. After the clients receive the new policy, you may upgrade using AutoUpgrade.

    See Creating a custom rule set and adding rules.

  • To reduce bandwidth during peak hours, in the Upgrade Clients with Package wizard, schedule AutoUpgrade for after hours. For wide area networks, you should also set up the remote clients to receive the upgrade package from a remote web server.

You confirm that the upgrade completed successfully by verifying the version number of the client software. The version number is displayed in the client's Help > About panel. The updated client version number is also displayed in Symantec Endpoint Protection Manager on the Clients page after a successful check-in. You click the group, then the Clients tab, and change the view to Client Status.

If both the Symantec Endpoint Protection client and the Symantec Network Access Control client are installed, you can assign both the Symantec Endpoint Protection package and the Symantec Network Access Control package to the same group. In this case, make sure that the Maintain Features option is selected.

See About upgrading client software.

To upgrade Windows clients by using AutoUpgrade in Symantec Endpoint Protection

  1. In the Symantec Endpoint Protection Manager console, click Admin.

  2. Click Install Packages.

  3. Under Tasks, click Upgrade Clients with Package.

  4. In the Upgrade Clients Wizard panel, click Next.

  5. In the Select Client Install Package panel, select the appropriate client installation package, and then click Next.

  6. In the Specify Groups panel, select the groups that contain the client computers that you want to upgrade, and then click Next.

  7. In the Package Upgrade Settings panel, select Download from the management server.

    To reduce bandwidth, stage and select a package on a web server that is local to the computers you upgrade.

  8. Click Upgrade Settings.

  9. On the General tab, select Maintain existing client features when updating.

    You can optionally add or remove features when upgrading.

  10. Optionally, on the Notification tab, customize the user notification settings. You can customize the message that is displayed on the client computer during the upgrade. You can also allow the user to postpone the upgrade by an amount of time you specify.

    For more information about schedule and notification settings, click Help.

  11. Click OK.

  12. In the Upgrade Clients Wizard Complete panel, click Next.

  13. Click Finish.

Legacy ID


Article URL http://www.symantec.com/docs/HOWTO80780

Terms of use for this information are found in Legal Notices