Installing the SEP 12.1 client on Windows Embedded Standard 7 with File Based Write Filter (FBWF)

Article:TECH185704  |  Created: 2012-04-03  |  Updated: 2014-07-02  |  Article URL http://www.symantec.com/docs/TECH185704
Article Type
Technical Solution


Issue



How to install the Symantec Endpoint Protection (SEP) 12.1 (RU1 and later) client on Windows 7 Embedded Operating System with File Based Write Filter (FBWF)


Environment



  • Windows Embedded Standard 7 (WES7) with File Based Write Filter (FBWF)
  • Symantec Endpoint Protection 12.1 RU1

This procedure does not work with the Enhanced Write Filter (EWF) as EWF does not use exclusions.  EWF requires use of Microsoft APIs, which SEP does not use.


Cause



Without the correct exclusions, changes in the file system and registry (In the SEP client virus definition content for example) are wiped each reboot, causing the product, or its updates, to be reinstalled each reboot.  This is undesirable.


Solution



 1. Install Windows Embedded 7 OS that includes the following minimum features:

  • Internet Explorer 
  • TCP/IP Networking
  • COM Base
  • IP Security Services
  • NDIS & NDIS User-Mode I/O Driver
  • OLE Dialog Interfaces
  • FBA: Driver Signing (First Boot Agent)
 
2. Ensure that the File Based Write Filter is off and install the SEP 12.1 RU1 client.
 
3. Reboot and ensure the SEP client updates completely before proceeding to step 4.
 
4. Enable the File Based Write Filter.
 
5. Use FBWFMgr.exe to exclude the following Symantec directories:
 
32 bit Windows 7
  • ProgramData\Symantec
  • Users\All Users\Symantec
  • Program files\Symantec
  • Program files\common files\Symantec Shared
 
64 bit Windows 7
  • ProgramData\Symantec
  • Users\All Users\Symantec
  • Program files(x86)\Symantec
  • Program files(x86)\common files\Symantec
  • Program files\common files\Symantec Shared
 
6. Reboot.
 

 





Article URL http://www.symantec.com/docs/TECH185704


Terms of use for this information are found in Legal Notices