Video Screencast Help

How to install Symantec Endpoint Protection on Windows Server 2008 Core OR Windows Server 2008 R2 Core

Created: 16 Nov 2011 • Updated: 09 Oct 2012 | 14 comments
Language Translations

User Translations

Machine Translations

Mithun Sanghavi's picture
+16 16 Votes
Login to vote

Problem: You want to know how to install Symantec Endpoint Protection on Windows Server 2008 R2 Server Core.

Server Core is a minimal installation for Windows Server 2008 and later which provides a small attack surface, a minimal set of services and a command line instead of GUI. More information on Server Core option can be found here: http://technet.microsoft.com/en-us/library/cc753802%28WS.10%29.aspx

Environment: 

Windows Server 2008 OR Windows Server 2008 R2

Solution: 

Symantec Endpoint Protection Manager v. 11.x OR Symantec Endpoint Protection Manager v. 12.1

It is not possible to install Symantec Endpoint Protection Manager (SEPM) on Server Core. Server Core is a installation mode of Windows Server which contains a minimal set of services to reduce an attack surface.

Server core is missing a GUI and Internet Explorer. One of installation requirements for SEPM is Internet Explorer and since it cannot be installed on Server Core, neither SEPM can.

 

Symantec Endpoint Protection Client v.11.x

To install unmanaged Symantec Endpoint Protection client software on Windows Server 2008 Server Core (all other clients)

1 Insert the product disc in the drive.
2 Open a command prompt.
3 Change directories to the root directory of the product disc.
4 Type Setup.exe, and then press Enter
5 Follow the steps of the installation wizard to complete the installation

To install unmanaged Symantec Endpoint Protection 64-bit client software on 64-bit Windows Server 2008 Server Core

1 Insert the product disc into the drive.
2 Change directories to the root directory of the product disc.
3 Type cd SEPWIN64\X64, and then press Enter.
4 Type vcredist_x64.exe, and press Enter. (to install Visual C++ Redistributable. Without it, you will not see the installation wizard.)
5 Change directories to the root directory of the product disc.
6 Type Setup.exe, and press Enter
7 Follow the steps of the installation wizard to complete the installation.

To install Managed Symantec Endpoint Protection client software on Windows Server 2008 Server Core

Windows 2008 Core installation works like any other Windows 2008 client to deploy SEP as managed. It is recommended to use 'Find unmanaged computers' to deploy a managed client from SEPM.

When installing the Symantec Endpoint Protection client via the Symantec Endpoint Protection Manager to Windows 2008 Core installation, we will require the following prerequisites:  

  1. Disable the Windows firewall, or enable communication on TCP ports 139 and 445 and UDP ports 137 and 138.
  2. The C$ and Admin$ shares on the target clients are accessible from the Manager system. The Server service is installed by default to provide administrative share support for management tools but could be disabled after installation.
  3. There is an password-protected Administrator account common to all target systems that are being simultaneously deployed to.

Since Windows 2008 Core is a command line only interface, doesn’t have IE, or support for user applications, UAC is not available in Server Core. So no additional step have to be done about this.

To access SEP interface just type SymCorpUI.exe located in the SEP installation folder (by default: "c:\Program Files\Symantec\Symantec Endpoint Protection")

 

For Custom Packages, you may have to create and export the package on a Windows GUI by following the steps provided in the Article:

http://www.symantec.com/docs/TECH102817

Later, you can bring the Exported Custom package on CD/DVD drive and follow the same steps provided below.

 

 

Symantec Endpoint Protection Client v.12.1

To install unmanaged Symantec Endpoint Protection client software on Windows Server 2008 Server Core (all other clients)

Execute setup.exe from the corresponding installation folder:

  • For 32 bit systems use SEP folder of the Symantec CD
  • For 64 bit systems use SEPx64 folder of the Symantec CD

Follow the on-screen prompts to complete the installation of the unmanaged client.

Note: To open SEP UI, browse to the folder C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.xxx.xxx.xxx\Bin and execute the file SymCorpUI.exe

To install Managed Symantec Endpoint Protection client software on Windows Server 2008 Server Core

Windows 2008 Core installation works like any other Windows 2008 client to deploy SEP as managed. It is recommended to use 'Find unmanaged computers' to deploy a managed client from SEPM.

When installing the Symantec Endpoint Protection client via the Symantec Endpoint Protection Manager to Windows 2008 Core installation, we will require the following prerequisites:  

  1. Disable the Windows firewall, or enable communication on TCP ports 139 and 445 and UDP ports 137 and 138.
  2. The C$ and Admin$ shares on the target clients are accessible from the Manager system. The Server service is installed by default to provide administrative share support for management tools but could be disabled after installation.
  3. There is an password-protected Administrator account common to all target systems that are being simultaneously deployed to.

Since Windows 2008 Core is a command line only interface, doesn’t have IE, or support for user applications, UAC is not available in Server Core. So no additional step have to be done about this.

To access SEP interface just type SymCorpUI.exe located in the SEP installation folder (by default: "c:\Program Files\Symantec\Symantec Endpoint Protection")

For Custom Packages, you may have to create and export the package on a Windows GUI by following the steps provided in the Article:

http://www.symantec.com/docs/TECH165801

Later, you can bring the Exported Custom package on CD/DVD drive and follow the same steps provided above.

 

To Uninstall Symantec Endpoint Protection, follow the Article below:

http://www.symantec.com/docs/HOWTO26763

 

Hope this helps ALL!!

Comments 14 CommentsJump to latest comment

Srikanth_Subra's picture

Great Artcile Thans..

Thanks & Regards,

 Srikanth.S

"Defeat the Defeat before the Defeat Defeats you"
(Swami Vivekananda)

0
Login to vote
Kelm's picture

Thanks for the insight. To me it is really unfortunate that SEPM does not install on Server Core. Wouldn't a server with minimum attack service be the ideal device to run SEPM?

I do understand that a browser (maybe not IE only) is needed to operate the console - but isn't that what the web console is supposed to do? The necessary browser could run on any other (non server core) machine…

Best regards,

Peter

+1
Login to vote
Ian_C.'s picture

SEPM might not rely on all the components of IE, but only some.

Saying SEPM relies on IE is a lot easier than relying on MSHTML.DLL vX.Y

Remember the whole Microsoft monopoly lowsuit 10yrsa ago & how MS couldn't seperate IE from Windows?

Please mark the post that best solves your problem as the answer to this thread.
0
Login to vote
Constantine's picture

good...

and it works well?

actually i did not never test it on Core

0
Login to vote
Ch@gGynelL_12's picture

Yes, Because SEPM is in GUI and Server cores are in command lines.

 

great job!

0
Login to vote