This article is an installation procedure for installing the Symantec Endpoint Protection with some details such as adding groups and related policies
Install IIS [From the Add remove programs, then windows components and Application services]
Insert SEM CD1
Select Manager
TCP Port 8014
Advance
Number of clients [The number of clients in the network]
Install My First Site
Site Name: Select a site name [Leave it to default]
Create Encryption Password: symantec
Embedded Database
Password of Admin: symantec
No [Finish]
[Login with admin and symantec]
Admin [From the left bar]
… => install Packages [At the bottom]
... => ... => Client Install Settings
... => ... => ... => Add Client Install settings
... => ... => ... => [Set the name:] Unattended
... => ... => ... => Unattended [From the dropdown menu]
... => ... => ... => Remove all previous logs and policies...
[Do the steps for Interactive and Silent too with proper selection]
... => ... => Client Feature Sets
... => ... => ... => Add
... => ... => ... => Name: Clients
... => ... => ... => Remove: Antivirus Email Protection
... => ... => ... => Add
... => ... => ... => Name: Servers
... => ... => ... => Antivirus Email Protection, Truscan Proactive Threat Scan, Application and Device control [Uncheck]
... => ... => ... => Add
... => ... => ... => Name: Slow Clients
... => ... => ... => Remove: Antivirus Email Protection, Truscan Proactive Threat Scan
Admin => Servers => Localhost => Edit Backup setting
... => ... => ... => ... => Number of backup to keep: 3
... => ... => ... => ... => Schedule Backups
Clients [From the lift bar]
... => Add Group: Clients, Slow Clients, Servers
[Select the Server Group]
... => Policies [Tab]
... => Inherit [Uncheck]
... => General Settings [Blue link]
... => ... => Security Settings [Tab]
... => ... => ... => Require Password to stop & Import & Uninstall
... => ... => ... => Password [Box]: symantec
... => ... => Tamper Protection [Tab]
... => ... => ... => Block it and log the event [Dropdown menu]
... => Withdraw Firewall Policy [Click the Task link]
... => Withdraw the Application and Device Policy
... => Install packages [Tab]
... => Add [Right click on screen]
... => ... => Maintain Existing [Uncheck]
... => ... => Servers [From the dropdown menu]
[Select the My Company from the tree]
... => Policies [Tab]
... => Communications Settings
... => ... => Pull Mode
... => ... => Heart beat Interval: 20 [Due to the number of clients]
... => ... => Randomization Window: 10 [Related to the A/M number]
... => General Settings [Blue link]
... => ... => Security Settings [Tab]
... => ... => ... => Require Password to stop & Import & Uninstall
... => ... => ... => Password [Box]: symantec
... => ... => Tamper Protection [Tab]
... => ... => ... => Block it and log the event [Dropdown menu]
... => ... => ... => [Fix all the locks]
... => Location-specific Settings: [The blue bar]
... => ... => Server Control
... => ... => ... => Customize
... => ... => ... => ... => Allow users to enable... [Uncheck]
... => ... => ... => ... => Display Intrusion... [Unckeck]
[Select the Slow Client From the tree]
... => Policies [Tab]
... => Inherit policies... [Uncheck]
... => Communication Settings [The link]
... => ... => Heartbeat interval: 60
... => ... => Randomization window: 30
... => General Settings
... => ... => Tamper protection
... => ... => ... => Protect Symantec... [Uncheck]
Policies [From the left bar]
... => Antivirus and Antispyware
... => [Right Click a proper default poicy for Servers, Slow Clients and the Clients]: Assign
... => Application and device control
... => [Right Click a proper default poicy for Slow Clients and the Clients, EXCEPT THE SERVER GROUP]: Assign
... => Policy Components [Click to Open]
... => Hardware Devices
... => Add [Right Click]
... => ... => Device Name: External USB Storages
... => ... => Device ID: USBSTOR*
[Now From the Clients on the lift, from the Clients tab, chose the Find Unmanaged Computers and do the rest]
[Bingo! You are done!]