Endpoint Protection

I'm new to SEPM and wanted to know which method is considered best practice for deploying SEP to computers in a domain? Last sys admin had it deployed via GPO but new sys admin deleted said policy. 

 

There is no best practice per se as it's really up to you and your network requirements.

How many clients? Multiple locations? Bandwith should be a priority.

SCCM would be easiest

Very helpful link here:

Top 10 Symantec Best Practices - Deploying Symantec Endpoint Protection Architecture

Article:TECH92051

|

Created: 2009-01-27

|

Updated: 2013-05-27

|

Article URL http://www.symantec.com/docs/TECH92051

 

What's required for remote deployment

Preparing Windows operating systems for remote deployment

Article:HOWTO80805

|

Created: 2012-10-24

|

Updated: 2013-10-07

|

Article URL http://www.symantec.com/docs/HOWTO80805

 

why not push through SEPM? or you can use any third party tool.

About 1200 clients, about 6 locations, relatively good connectivity to most locations. I agree that using sccm is the best solution but our sys admin has no experience with sccm and now it has become my word against his.

 

He's been here for years and I am new. Having a hard time convincing his supervisor about the benefits of sccm let alone deploying SEP via GPO.

I would be most focused on bandwidth and pushing clients over the WAN. It is definitely doable though as I've pushed clients via the SEPM over a VPN link with good results.

If you can schedule this accordingly I think you should be fine. I would test out a few PCs at each location and go from there.

There is no best method as such, all methods are good. We as admin need to take a call based on the our environment , our requirement and the type of users on whose machine we want to install the product. Taking these into account you have find a middle path. The options that you have is: 1. Migration and Deployment Wizard. 2. Sharing the client exe 3. Weblink 4. SCCM 5. GPO I personally don't have any issue with GPO option, if you want to go by that here are the options. When Installing Symantec Endpoint Protection 11 by Active Directory Group Policy Object, Which Method of Deployment is Supported? http://www.symantec.com/docs/TECH91330 About installing clients with Active Directory Group Policy Object http://www.symantec.com/docs/HOWTO26773 Creating a GPO software distribution http://www.symantec.com/docs/HOWTO55429

Do you need more assistance with your problem or were you able to get it resolved?

If you could post an update for followers of this thread that would be most helpful.

Otherwise, if resolved, you can close the thread out by clicking the "Mark as solution" link at the bottom left on the most helpful post. If multiple posts helped to solve your problem, please click the "Request split solution" link at the bottom left, select the most helpful posts and click the "Submit" button. This will benefit admins looking for a resolution to the same problem.

Thanks and take care,
Brian