Automating a Symantec Anti-Virus Install
trb48
June 13th, 2007
One thing that we periodically have to do is update or install Symantec Anti-virus. It can be a pain, unless you know how to script the install. Here's a script I wrote up to help relieve my pain. Hopefully it'll give you some relief too.
Before you run the script you will have to copy the install files to the remote computer (or run from a shared folder on your network). I created a little self-extracting package that runs the script below.
I have posted the script that I use below, here is an overview of what happens in the script:
- Check if Symantec Anti-virus is installed, if it is, it uninstalls the previous version. I provided our users with the password so it will uninstall.
- Installs the new version of Symantec Antivirus
- Removes the Start Menu folders that were created during the install
- Updates the Anti-virus so it has the new version
Here is the script:
Title Installing Symantec Antivirus... @ECHO OFF ECHO ECHO ECHO ECHO ECHO Echo Uninstalling Symantec Antivirus Echo The password to uninstall Symantec Antivirus is: password IF EXIST "C:\Program Files\Symantec AntiVirus\VPTray.exe" msiexec /uninstall "Symantec AntiVirus.msi" "Symantec AntiVirus.msi" /qb RUNLIVEUPDATE=0 REBOOT=REALLYSUPPRESS copy "C:\Documents and Settings\All Users\Start Menu\Programs\Symantec Client Security\Symantec AntiVirus.lnk" "C:\Documents and Settings\All Users\Start Menu\Programs\Anti-Virus" rmdir /S /Q "C:\Documents and Settings\All Users\Start Menu\Programs\Symantec Client Security" ECHO Updating Symantec Antivirus with the latest virus definitions "C:\program files\symantec antivirus\VPDN_LU.exe" /s exit
The file that actually configures the install is called "grc.dat." It locks down the install, so the user doesn't mess something up. To find out how to create "grc.dat," look here.
About Endpoint Management and Virtualization Community Blog
The Endpoint Management & Virtualization Community Blog is the perfect place to share short, timely insights including product tips, news and other information relevant to the Endpoint Management & Virtualization community. Any authenticated Connect member can contribute to this blog.
Filter by:
Blog Tags
7.1 Agents Altiris Client Management Suite Altiris Deployment Solution Altiris IT Asset Management Altiris Notification Server Altiris Recovery Solution Altiris Server Management Suite Asset Management Suite Backup Exec Backup Exec System Recovery Basics Best Practice Beta CIO Digest Case Study Compatibility Configuring Customer Preview Customer Reference Database Dell Dell Management Products Demonstration Documentation Downloads Drivers Emerging Threats Endpoint Management and Virtualization Endpoint Protection (AntiVirus) Enterprise Vault Error messages Evaluating Features General Symantec Ghost Solution Suite HP Management Products Helpdesk Solution How to ITMS Industry Event Inside Symantec Installing Licensing Linux Local DS GURU Email group Mac OS ManageFusion Mobile & Wireless NetBackup New Release News News Performance Platforms & Hardware Problem Management Recovering Reporting Restore SP2 SecurityExpressions Service Pack 2 ServiceDesk Storage Foundation Symantec Connect Symantec Event TMS TechTips Tip/How to Tips/How To Training Troubleshooting Upgrade User Group VDI VMware Virtualization Virtualization Vision Vulnerabilities & Exploits Windows Windows Wise Application Packaging Wise Installation Development Wise Virtual Composer Workflow Solution Workspace Corporate Workspace Profiles Workspace Remote Workspace Streaming Workspace Virtualization XPF baltimore deployment hugo known_issue pcAnywhere solution webcast
Someone tried to update
Someone tried to update from SAV 10.x to 11d ? Any positive or negative experience ?
Thanks
PM
Its own delivery mechanism?
Doesn't Symantec have its own delivery mechanism for installing the Symantec Antivirus client? I suppose it is nice to have options and this might work better for a re-install of the product.
Thanks - Tom Fronza
In 10.x and previous there
In 10.x and previous there was a server deployment for SAV clients("ClientRemote install").
I used this feature when did the update from 8.x and 9.x versions.
Regards
I just recently upgraded to
I just recently upgraded to v10 and yes, Symantec does have its own updater, but it has its own faults as well. We decided to utilize Software Delivery solution to update our clients because we could do it based on policy and execute the upgrade in the wee hours of the morning.
We setup two collections; one for clients that have the current client installed, and one for clients that do not have AV installed or have an outdated version. Next we setup a software delivery package that will install/upgrade the AV client. We then setup a Software Delivery Task that will install the client based off of the appropriate collection, then when the next sofware inventory runs, the client will remove itself from the collection that is targeted for the install/upgrade.
Works like a CHARM!!
During the previous
During the previous Symantec AV migrations I didn't have big failures on client update, (only few clients failed for different reasons). But I agree about that is no really perfect SAV updater and this script is a good help in case of similar issues.
Regards
PM
Below is what I have used.
Below is what I have used. Note the step to disable the password.
(new task) rem Uninstall previous versions REG ADD HKLM\SOFTWARE\Intel\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /v LockUnloadServices /d 0 /t REG_DWORD /f REG ADD HKLM\SOFTWARE\Intel\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /v UseVPUninstallPassword /d 0 /t REG_DWORD /f rem 7.x MsiExec.exe /x {BD12EB47-DBDF-11D3-BEEA-00A0CC272509} REMOVE=ALL /qn rem 8.0.0.374 MsiExec.exe /x {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} REMOVE=ALL /qn rem 9.0.0.338 MsiExec.exe /x {848AC794-8B81-440A-81AE-6474337DB527} REMOVE=ALL /qn rem 10.0.359.0 msiexec.exe /x {5A633ED0-E5D7-4D65-AB8D-53ED43510284} REMOVE=ALL /qn (new task) REM Install Symantec Antivirus Client 10.1 msiexec.exe /i "\\SERVER\SAV10.1\Symantec AntiVirus.msi" REBOOT=ReallySuppress INSTALLSERVER=0 NETWORKTYPE=1 SERVERNAME=MYSERVER RUNLIVEUPDATE=0 ADDLOCAL=SAVMain,SAVUI,SAVHelp,QClient /qb! copy "\\SERVER\SAV10.1\Symantec Antivirus Config\GRC.DAT" "c:\Documents and Settings\All Users\Application Data\Symantec\Symantec Antivirus Corporate Edition\7.5\GRC.DAT" copy "\\SERVER\SAV10.1\Symantec Antivirus Config\d34634634563453451bb7d346dfdf45g359c01a24c2171e.0.servergroupca.cer" "C:\Program Files\Symantec Antivirus\pki\roots\d34634634563453451bb7d346dfdf45g359c01a24c2171e.0.servergroupca.cer" setacl.exe -on "C:\Program Files\Common Files\Symantec Shared" -ot file -actn ace -ace "n:Users;p:profile;s:n" (reboot task)any updated scripts for use
any updated scripts for use with migration from 8.X to SEP 11?
Would you like to reply?
Login or Register to post your comment.