How To: Create an unmanaged client install package from the SEPM with custom policies.

Article:TECH105498  |  Created: 2008-01-29  |  Updated: 2011-05-09  |  Article URL
Article Type
Technical Solution



There are certain settings that cannot be configured with the client interface. You want to install an unmanaged client that has some of these settings configured.



The Big Picture Steps:
  1. Install the SEPM (Symantec Endpoint Protection Manager)

  2. Create the required policies

  3. Export a Client Install Package

  4. Deploy the Install Package.

Install the SEPM:
Please be sure to get the latest version of the software


NOTE:  If the SEPM is already installed you may skip this section...


  1. Run the setup.exe in the SEPM folder on CD1.

  2. Installing with all the default settings will work fine for the purposes of creating an unmanaged client package with custom policies.

  3. Configure the Database.

    • Use all the default settings, using the Embedded Database.
  4. Choose No when prompted about the Migration and Deployment Wizard.

  5. Log into the Manager.

    • If you are able to log in and view the Admin tab, you are ready to continue to the next section.

Create the Required Policies:

  1. Create a new client group

    1. Open and log into the SEPM

    2. Click the Clients tab

    3. Select Add Group... under Tasks

      • If you are wanting to copy the policies from an already created group for the unmanaged clients be sure to highlight the intended group first, then click Add Group as that will create the new group as a sub-group of the selected group and thusly make a copy of all of its policies when it is created.

  2. Select the newly created group

  3. Click the Policies tab (on the right, not the main policies tab)

  4. Uncheck Inherit policies and setting from parent group

  5. Open each policy (there are two sections: Location-independent Policies and Settings and Location-specific Policies and Settings... make sure to go through both) and edit the settings accordingly.

    • When trying to edit a shared policy, you will be prompted to either: Copy to Non-shared or Edit Shared. You should always choose Copy to Non-shared in this case. In a managed environment, you should pick whichever is best for the situation.

    • In the policies, you'll notice little padlock icons next to some options. Each padlock icon should be clicked and set to open/unlocked so that the corresponding option will be changeable in the unmanaged client interface.

  6. Open the LiveUpdate Policy (choose Copy to Non-Shared)

    1. Click Server Settings in the top-left corner

    2. Uncheck Use the default management server (Windows computers only)

    3. Check Use a LiveUpdate server

    4. Click Schedule in the top-left corner

    5. Check Enable LiveUpdate Scheduling

      • Choose the desired schedule. By default it will be to run every 4 hours.

    6. Click Advanced Settings in the top-left corner

    7. Check Allow the user to manually launch LiveUpdate

    8. Check Allow the user to modify the LiveUpdate schedule (if desired)

    9. Click OK

  7. Expand Location-specific Settings

  8. Click Tasks across from "Client User Interface Control Settings" and choose Edit Settings...

  9. Select Server Control 

  10. Click OK

    • NOTE:
      Be aware that you will have the policies in place but be unable to edit or alter some of them. This is due to the fact that unmanaged clients aren't meant to be managed which is what this procedure is in essence trying to do by implementing managed policies. Please test and ensure this is the behavior you are wanting before implementing it in a large scale environment.


Export a Client Install Package:

  1. Click the Admin tab

  2. Click Install Packages (bottom in blue)

  3.  Click Client Install Settings (top of the same column)

  4. Click Add Client Install Settings... under Tasks

  5. Name and Edit the Install Setting as you see fit.

    • It is recommended to changing Unattended to Interactive

  6. After configuring the Client Install Settings the way you wish click OK

  7.  Click Client Install Feature Sets (below Install Settings)

  8. Click Add Client Install Feature Set... under Tasks

  9.  Name and Edit the Feature Set as you see fit.

  10.  After configuring the Feature Sets the way you wish click OK

  11.  Click Client Install Packages (above Install Settings)

  12. Select the intended 32-bit or 64-bit package in the list

  13. Click Export Client Install Package... under Tasks

  14. Click the Browse button and select the desired destination folder location of where the unmanaged install package will be saved

  15. In each drop-down menu, select the Installation Settings and Feature Set packages you created.

  16. Select Export an unmanaged client

  17. Check the box next to the group you created.

  18. Select Computer Mode 

  19. Click OK

    • This will create the install package and save it in the location specified above



Deploy the Install Package:

  1. Copy the folder where the package was exported to a network share or USB thumb drive.

  2. Copy the setup.exe to the computer that you wish to install to.

  3. Run setup.exe and follow the prompts (if you chose Interactive) to install the package.


Legacy ID


Article URL

Terms of use for this information are found in Legal Notices