Managing client installation packages
To manage computers with Symantec Endpoint Protection Manager, you must export a managed client installation package, and then install the files in the package onto client computers. You can export packages to deploy the client with Symantec Endpoint Protection Manager, or you can deploy them with a third-party deployment tool. You can export unmanaged clients.
To manage computers with Symantec Endpoint Protection Manager, you must export a managed client installation package, and then install the files in the package onto client computers. You can export packages to deploy the client with Symantec Endpoint Protection Manager, or you can deploy them with a third-party deployment tool.
You can export these packages as a single executable file or as a series of files in a directory. The method that you choose depends on your deployment method and whether you want to upgrade client software in groups. Typically, if you use Active Directory Group Policy Object, you do not choose to export to a single executable file.
Symantec occasionally provides updated packages of installation files, usually when a new product version releases. You can automatically update the client software on all managed Windows clients in a group with the AutoUpgrade feature. You do not need to redeploy software with installation deployment tools.
Table: Client installation package-related tasks
Configure client installation packages
You can select specific client protection technologies to install and you can specify how the installation interacts with end users.
You can specify how the installation interacts with end users.
See Configuring Windows client installation feature sets.
See About the Windows client installation settings.
Export client installation packages
You can export packages for managed clients or unmanaged clients. You can also export packages to install with third-party deployment tools.
You can export packages to install with Symantec Endpoint Protection Manager or with third-party deployment tools.
See Exporting client installation packages.
Add client installation package updates
You can add updated client installation packages to the database to make them available for distribution from Symantec Endpoint Protection Manager. You can optionally export the packages during this procedure to make the package available for deployment to computers that do not have the client software.
See Adding client installation package updates.
Upgrade Windows clients in one or more groups
You can install the exported packages to computers one at a time, or deploy the exported files to multiple computers simultaneously.
When Symantec provides updates to client installation packages, you first add them to Symantec Endpoint Protection Manager and make them available for exporting. However, you do not have to reinstall them with client deployment tools. The easiest way to update Windows clients in groups with the latest software is to use AutoUpgrade. You should first update a group with a small number of test computers.
See Upgrading Windows clients by using AutoUpgrade in Symantec Endpoint Protection.
You can also update clients with LiveUpdate if you permit clients to run LiveUpdate and if the LiveUpdate Settings policy permits updates.
Delete client installation packages
You can delete older client installation packages to save disk space. However, AutoUpgrade sometimes uses the older Windows client installation packages to build upgrade packages. The upgrade packages result in smaller downloads by clients.
See Preparing for client installation.