How to Deploy Symantec Endpoint Protection to your client computers using the Migration and Deployment Wizard.

Article:TECH102907  |  Created: 2007-01-14  |  Updated: 2013-01-08  |  Article URL
Article Type
Technical Solution



You want to know the recommended steps for deployment after installing the Symantec Endpoint Protection Manager.


Follow these steps to deploy Symantec Endpoint Protection (SEP) to the client computers on your network:

  1. In the Symantec Endpoint Protection Manager Console, under Clients, and View Clients ensure that you have a main Server group in addition to My Company and Default Group.
  2. Create a main Server Group (if necessary) under the My Company group by following these steps:
    1. Right-click My Company.
    2. Click Add Group.
    3. Enter a Group Name for your main group.
    4. Click OK.
  3. Go to Admin> Install Packages and follow these steps to create a custom Install Package:
    1. Select Client Install Settings, and then click Add Client Install Settings.
    2. Enter a Name and optional Description for the custom settings and adjust Client Installation Settings as desired.
    3. Click OK.
    4. Select Client Install Feature Sets, and then click Add Client Install Feature Sets.
    5. Enter a Name and optional Description for the custom Feature Set.
    6. Click OK.
  4. Select Client Install Packages.
  5. Click Export Client Install Package
  6. In the "Export folder" field click the Browse button and browse to (or create) a folder to export the installation package to.
  7. Having the " create a single executable for this package" check box checked will create a single executable for this package and unchecking this option will create an MSI install package.
  8. In the "Installation Settings and Features" section, pick the customized installation settings and features you created in Step 3 from the drop-down lists.
  9. In the "Policy Settings" section, select the group(s) that you want clients to be added to and ensure that the "Add clients automatically to selected groups" option is enabled.
  10. Adjust other settings as wanted and click OK. A progress indicator appears as your Installation package is created and exported to the designated folder.

After they are created and saved, you are ready to deploy the installation package to your clients. Follow these steps:

  1. Launch the Migration and Deployment Wizard by going to Start > All Programs > Symantec Endpoint Protection Manager > Migration and Deployment Wizard.
  2. Select Next at the "Welcome" screen,
  3. Ensure Deploy the client is enabled and click Next.
  4. Enable the "Select an existing client install package to deploy" option, and then click Finish.
  5. In the "Push Deployment Wizard", click the Browse button.
  6. In the "Browse for Folder" dialog box, navigate to and open the folder that you exported your installation package to in the previous Step 6. Select the subfolder.
  7. Click OK, and then click Next.
  8. In the "Select one or more computers... screen", either:
    1. Click the Add or Import Computer button and select the computers based upon "IP Address" or "Host name." You may also use a text file list that is populated with either Host names or IP Addresses. Format for the name/ip list txt file: 1 value per line, if 2 values are provided on the same line the second value is ignored, values may be a host name or IP address, IP addresses must follow IPv4 addressing.

    2. Drill down into the "Microsoft Windows Network" to Add your workstations to the "Computers to deploy to" pane.
  9. After your workstations are added to the "Computers to deploy" pane, click Finish. A progress indicator appears as the Symantec Endpoint Protection software is deployed.
  10. The Symantec Endpoint Protection software now installs automatically to the workstations.

This document is available in the following languages:


Legacy ID


Article URL

Terms of use for this information are found in Legal Notices