How to install Symantec Endpoint Protection Small Business Edition clients

Article:TECH93328  |  Created: 2009-01-08  |  Updated: 2009-01-13  |  Article URL http://www.symantec.com/docs/TECH93328
Article Type
Technical Solution


Issue



This document describes how to install Symantec Endpoint Protection Center Small Business Edition clients.


Solution



You install the Symantec Endpoint Protection Small Business Edition client after you install Symantec Protection Center. For instructions, read the document How to install Symantec Protection Center.

Overview
To install clients, there are four major steps.
  • Identify client computers
    Identify the computers on which you want to install the client software, and determine whether they should be managed or unmanaged clients. (Most computers should be managed clients.) See "About managed and unmanaged clients" below.

    Remember that Symantec Protection Center is a manager for the clients, and does not protect the computer itself. You should include the computer that hosts Symantec Protection Center on the list of computers on which you install the client software.
  • Prepare client computers for installation
    See the document Steps to prepare computers to install Symantec Endpoint Protection Small Business Edition 12.
  • Identify client installation settings
    Installation prompts you to specify the computer group names and the protection types. See "Client installation settings" below.
  • Deploy the client software
    This step distributes the client installation package to the client computers. See "Deploying clients" below.


About managed and unmanaged clients
You install clients as either managed or unmanaged clients.
  • Managed clients
    Managed clients use Symantec Protection Center. Managed clients are centrally managed; you administer the computers from the console. Managed client computers connect to your network. You use the console to update the client software, security policies, and virus definitions on the managed clients.

    In most cases, you install client computers as managed clients.

    You can install managed clients as follows:
    • During the initial product installation
    • From Symantec Protection Center after installation
  • Unmanaged clients
    Unmanaged clients do not use Symantec Protection Center. Unmanaged clients are self-managed; you or the primary computer users must administer the client. In most cases, unmanaged client computers connect to your network intermittently or not at all. You or the primary computer users must update the client software, security policies, and virus definitions on the unmanaged clients.

    You install unmanaged clients directly from the product CD. See "Installing an unmanaged computer" below.


Client installation settings
Client installation prompts you to specify the computer group names and the protection types.
  • Group
    The group that contains the client computers. The default value is "Laptops and Desktops." For more information, see "About computer groups" on page 81 of the Implementation Guide.
  • Protection type
    The protection technologies that you want to install on the client computers. The protection type options are as follows:
    • Virus and Spyware Protection
      Checking this option installs File System Auto-Protect and Proactive Threat Protection.

      Proactive Threat Protection is disabled on Windows Server operating systems.
    • Include Email Protection
      Checking this option installs Microsoft Outlook Auto-Protect and Internet Email Auto-Protect. For performance reasons, Microsoft Outlook Auto-Protect is not installed on supported Microsoft Server operating systems.
    • Network Threat Protection
      Checking this option installs firewall protection and Intrusion Prevention protection.

After installation, you can enable or disable the protection technologies in the security policies.


Deploying clients
You deploy the Symantec Endpoint Protection Small Business Edition client by using the Client Installation Wizard. The Client Installation Wizard automatically runs during the initial product installation. After the initial product installation, you can run the Client Installation Wizard from the console.

You can deploy the client software using the following methods:
  • Email Notification Installation
    Users receive an email message that contains a link to download and install the client software. The users must have local administrator rights to their computers. Email notification installation is the recommended deployment method.
  • Remote Push Installation
    Remote push installation lets you control the client installation. Remote push installation pushes the client software to the computers that you specify. The installation begins automatically.
  • Custom Installation
    Custom installation creates an executable installation package that you distribute to the client computers. Users run a setup.exe file to install the client software.
Deploying clients by using Email Notification Installation
Email Notification Installation is the recommended method for installing the client software. Email Notification Installation is easy to use. Users receive an email message that contains a link to download and install the client software. Email Notification Installation performs the following actions:
  • Create the client installation packages.
    Client installation packages are created for 32-bit and 64-bit Windows computers. The installation packages are stored on the computer that runs Symantec Protection Center.
  • Notify the computer users about the client installation packages.
    An email message is sent to selected computer users. The email message contains instructions to download and install the client installation packages. Users follow the instructions to install the client software. You or the computer users must restart the computers after installation.

You may start the client deployment from the console.

To deploy clients by using Email Notification Installation
  1. In Symantec Protection Center, click Home.
  2. On the Home page, in the Common Tasks menu, select Install protection client to computers.
  3. In the Client Installation Wizard, select the group to contain the computers.
  4. In the Client Installation Wizard, select the protection types, and then click Next.
  5. In the Client Installation Wizard, click Email Notification Installation, and then click Next.
  6. In the Client Installation Wizard, specify the email recipients.
    To specify multiple email recipients, type a comma after each email address.
  7. In the Client Installation Wizard, accept the default email subject and body or edit the text, and then click Next.
  8. Click Finish.
  9. Confirm that the computer users received the email message and installed the client software.
  10. You or the computer users must restart the client computers. See "Restarting client computers" below.
  11. Confirm the status of the deployed clients.

Restarting client computers
You can restart a selected computer, or restart all the client computers in a selected group, from Symantec Protection Center.

To restart a selected client computer
  1. In the console, click Computers.
  2. On the Computers page, on the Computers tab, select a computer.
  3. On the Computers tab, select a computer, right-click Run Command on Group, and then click Restart Client Computers.

To restart the client computers in a selected group
  1. In the console, click Computers.
  2. On the Computers page, on the Computers tab, select a group, right-click Run Command on Group, and then click Restart Client Computers.


Deploying clients by using Remote Push Installation
Remote Push Installation lets you control the client installation. Remote Push Installation pushes the client software to the computers that you specify. Remote Push Installation requires knowledge of how to search networks to locate computers.

Remote Push Installation performs the following actions:
  • Locate computers on your network.
    Remote Push Installation locates the computers that you specify or the computers that are discovered to be unprotected.
  • Prepare the client computers and the firewall for remote deployment.
    See the document Steps to prepare computers to install Symantec Endpoint Protection Small Business Edition 12.
  • Push the client software to the computers that you specify.
    To push the client software, you should use a domain administrative account if the client computer is part of an Active Directory domain. Remote Push Installation requires elevated privileges.
  • Install the client software on the computers.
    The installation automatically begins on the computers. You or the computer users must restart the computers after installation.
    See "Restarting Client computers," above.

You may start the client deployment from the console.

To deploy clients by using Remote Push Installation
  1. In the console, click Home.
  2. On the Home page, in the Common Tasks menu, select Install protection client to computers.
  3. In the Client Installation Wizard, select the group to contain the computers.
  4. In the Client Installation Wizard, select the protection types, and then click Next.
    See "Client installation settings" above.
  5. In the Client Installation Wizard, click Remote Push Installation, and then click Next.
  6. In the Client Installation Wizard, locate the computers to receive the client software, and then click >> to add the computers to the list.
    To browse the network for computers, click Browse Network.
    To find computers by IP address or computer name, click Search Network, and then click Find Computers.
    Authenticate with the domain or workgroup if prompted.
  7. Click Next.
    You are reminded to install the client on the computer that runs Symantec Protection Center. Installing the client on the computer that runs Symantec Protection Center protects the computer from viruses and security threats. Symantec recommends that you install the client on all your computers.
  8. Click No to go back and add Symantec Protection Center to the list of computers, or click Yes to continue.
  9. Click Send to push the client software to the selected computers.
  10. Wait while the client software is pushed to the selected computers.
  11. Click Finish.
    The installation starts automatically on the client computers. The installation takes several minutes to complete.
  12. You or the computer users must restart the client computers.
    See "Restarting client computers," above.
  13. Confirm the status of the deployed clients.

To confirm the status of the deployed clients
  1. In the console, click Reports.
  2. On the Quick Reports tab, for "Report type," select Computer Status.
  3. For "Select a report," select Client Inventory Details.
  4. Click Create Report.


Deploying clients by using Custom Installation
Custom Installation creates the custom packages that can be installed using third-party deployment software or a logon script. For detailed instructions on deploying clients by using Custom Installation, see page 51 of the Implementation Guide.


Deploying an unmanaged client
Unmanaged computers do not use Symantec Protection Center. Unmanaged computers are self-managed; you or the primary computer users must administer the computers. In most cases, unmanaged computers connect to your network intermittently or not at all.

Since unmanaged computers are self-managed, you or the primary computer users must maintain the computers. This maintenance includes monitoring and adjusting the protection on the computers, and updating security policies, virus definitions, and software.

To install an unmanaged client
  1. On the computer, insert the product disc.
    The installation starts automatically. If it does not start automatically, double-click Setup.exe.
  2. Click Install an unmanaged client, and then click Next.
  3. On the License Agreement Panel, click I accept the terms in the license agreement, and then click Next.
  4. Confirm that the unmanaged computer is selected, and then click Next.
    This panel appears when you install the client software for the first time on a computer.
  5. On the Protection Options panel, select the protection types, and then click Next.
    See "Client installation settings," above.
  6. On the Ready to Install the Program panel, click Install.
  7. On the Wizard Complete panel, click Finish.






Legacy ID



2009040814021448


Article URL http://www.symantec.com/docs/TECH93328


Terms of use for this information are found in Legal Notices