Video Screencast Help
As we strive to continually improve your experience on our site, please help us by taking this survey and tell us about your satisfaction level using Symantec Connect. One lucky winner will receive 500 Connect points! * Take the survey.

Deploy SEP Client By Active Directory GPO

Created: 27 Mar 2013 • Updated: 09 May 2013 | 7 comments
Language Translations
W007's picture
+6 6 Votes
Login to vote

Steps to Deploy SEP Client By Active Directory GPO

Create MSI package in SEPM console

  1. Login SEPM console ->Admin ->Install Package.
  2. Click on Client Install Settings ->Add Client Installation Settings.


       3.    Add  Client Installation Settings->Give Name as per below screen shot.


    4. Export Client Package ->Unchecked “Create a Single EXE file for  this package.”


5.Export the MSI package.



7. Copy MSI package NETLogon folder.

How to create Group Policy in AD

  1. Start ->Run type gpmc.msc.
  2. Open Group Policy management Console.
  3. Click Domain Name -> right Click ->Create a GPO in this Domain.


4. Open New GPO dialog Box ->Give the GPO name (Software Installation)->Ok.


 5. Select GPO Edit ->Open New Dialog box ->Computer Configuration ->Policies ->Software Settings -> Software Installation.


 6. Software Installation ->New ->Package



 7. Open Shared NETLogon Location ->Select SEP package ->open.


 8. Select Deployment Method (Assigned)


 9. Affter Assigned package showing below Image.


10. Assgin the package respected OU.

11. Restart system.

12 After Sep Client Showing Respected SEPM Group.

Comments 7 CommentsJump to latest comment

raju123's picture

Thanks for sharing artical :) +1

Login to vote
nwranich's picture

Nice article.

Login to vote
viktor777's picture

We have SEP12.1
I created "Client Install Settings" for silent installation - only the status bar is visible.
Settings are confirmed in the "Setup.ini" file - /quiet /norestart
Generated the "Client Install Package" for 64 bit.
As a result "SEP64.msi" file was created.
Deploying SEP64.msi via GPO causes the error "source files missing".
Running SEP64.msi manually on a client from a shared folder ends up with the "Symantec Welcome" windows - action required.

But if I run the following line "msiexec.exe /qb /norestart /i Srp64.msi" from the command line, installs SEP client on the test computer successfully.

Something is missing - running SEP64.msi by itself is not working.

Contacted Symantec tech support - they are not supporting SEP deployment via GPO.

I need to deploy SEP via GPO.

Any ideas are greatly appreciated.


Login to vote
pete_4u2002's picture

does 32 bit instal successfully through GPO?

Login to vote
Rash_M's picture

wow nice article !!!!!!!!!+1

Login to vote
viktor777's picture

I have 64 bit stations only.
So didn't create 32 bit.

Login to vote