How to install Symantec Endpoint Protection on Windows Server Server Core Operating Systems.

Article:TECH174673  |  Created: 2011-11-17  |  Updated: 2014-01-20  |  Article URL http://www.symantec.com/docs/TECH174673
Article Type
Technical Solution

Product(s)

Issue



How to install Symantec Endpoint Protection (SEP) client on Windows Server Server Core Operating Systems.


Environment



Windows Server 2008 Core Edition

Windows Server 2008 R2 Core Edition

Windows Server 2012 Core Edition (SEP 12.1 RU2 and later ONLY)


Solution



Symantec Endpoint Protection Manager v. 11.x or Symantec Endpoint Protection Manager v. 12.1 

It is not possible to install Symantec Endpoint Protection Manager (SEPM) on Server Core.
Server Core is a installation mode of Windows Server which contains a minimal set of services to reduce an attack surface.
Server core does not come with a GUI or Internet Explorer (IE). One of installation requirements for the SEPM is Internet Explorer and since IE cannot be installed on Server Core, neither can the SEPM. 

 
Symantec Endpoint Protection Client v.11.x

IMPORTANT: SEP 11 is not supported on Windows Server 2012 Core Edition.  You must use SEP 12.1 RU2 or later for Windows Server 2012 Core Edition.

 
To install Unmanaged Symantec Endpoint Protection 32-Bit client software on Windows 2008 or 2008 R2 Server Core:
1.     Insert the product disc in the drive.
2.     Open a command prompt.
3.     Change directories to the root directory of the product disc.
4.     Type Setup.exe, and then press Enter
5.     Follow the steps of the installation wizard to complete the installation

To install Unmanaged Symantec Endpoint Protection 64-bit client software on
 64-bit Windows 2008 or 2008 R2 Server Core
1.     Insert the product disc into the drive.
2.     Change directories to the root directory of the product disc.
3.     Type cd SEPWIN64\X64, and then press Enter.
4.     Type vcredist_x64.exe, and press Enter. (to install Visual C++ Redistributable. Without it, the installation wizard will not present it's GUI.)
5.     Change directories to the root directory of the product disc.\
6.     Type Setup.exe, and press Enter
7.     Follow the steps of the installation wizard to complete the installation.

To install Managed Symantec Endpoint Protection client software on Windows Server Core
Windows Server Core installation works like any other Windows Server system with regard to deploying a managed SEP client.  It is recommended to use 'Find unmanaged computers' to deploy a managed client from the SEPM.
When installing the SEP client via the SEPM to a Windows Server Core installation, the following prerequisites are required:
  1. Disable the Windows firewall, or allow communication on TCP ports 139 and 445 and UDP ports 137 and 138.
  2. The C$ and Admin$ shares on the target client systems are accessible from the SEPM system.  
  3. The Server service is installed by default to provide administrative share support for management tools but could be disabled after installation.
  4. There is an password-protected Administrator account common to all target systems that are being deployed to.
Since Windows Server Core is a command line only interface, does not have IE installed, and does not have support for user applications; User Access Control (UAC) is not available
To access the SEP client  interface, from the command prompt, type SymCorpUI.exe located in the SEP installation folder 
 (By default the location is: "C:\Program Files\Symantec\Symantec Endpoint Protection")
For Custom Packages:
Create and export the package using a Operating System from the Windows GUI by following the steps provided in this document:
Later, the Exported Custom package can be burned to a CD/DVD drive and then used when following the steps provided above.
 
 
Symantec Endpoint Protection Client v.12.1

IMPORTANT: Only SEP 12.1 RU2 and later is supported on Windows Server 2012 Core Edition.

 
NOTE: The following proceedures are the same for Windows Server 2008, 2008 R2 and 2012 Core Editions.
To install Unmanaged Symantec Endpoint Protection client software V. 12.1 on Windows Server Core:
Execute setup.exe from the corresponding installation folder:
·         For 32 bit systems use SEP folder of the Symantec CD
·         For 64 bit systems use SEPx64 folder of the Symantec CD
 
Follow the on-screen prompts to complete the installation of the unmanaged client.
To access the SEP client  interface, browse to the folder "C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.xxx.xxx.xxx\Bin" and execute the file SymCorpUI.exe.

To install Managed Symantec Endpoint Protection client software v. 12.1 on Windows Server Core
Windows Server Core installation works like any other Windows Server system with regard to deploying a managed SEP client.  It is recommended to use the 'Client Deployment Wizard' to deploy a managed client from the SEPM.
When installing the SEP client via the SEPM to Windows Server Core, the following prerequisites are required:  
  1. Disable the Windows firewall, or enable communication on TCP ports 139 and 445 and UDP ports 137 and 138.
  2. The C$ and Admin$ shares on the target clients are accessible from the Manager system.
  3. The Server service is installed by default to provide administrative share support for management tools but could be disabled after installation.
  4. There is an password-protected Administrator account common to all target systems that are being simultaneously deployed to.  
Since Windows Server Core is a command line only interface, does not have IE installed, and does not have support for user applications; User Access Control (UAC) is not available
To access SEP client interface just type SymCorpUI.exe located in the SEP installation folder 
(by default: "C:\Program Files\Symantec\Symantec Endpoint Protection")
For Custom Packages:
Create and export the package using a Operating System from the Windows GUI by following the steps provided in this document:
Later, the Exported Custom package can be burned to a CD/DVD drive and then used when following the steps provided above.
 
To Uninstall Symantec Endpoint Protection, follow the Article below:

http://www.symantec.com/docs/HOWTO26763




Article URL http://www.symantec.com/docs/TECH174673


Terms of use for this information are found in Legal Notices