Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Best practice - deploy Endpoint via GPO or manager?

Created: 03 Dec 2013 • Updated: 03 Dec 2013 | 6 comments

I'm new to SEPM and wanted to know which method is considered best practice for deploying SEP to computers in a domain? Last sys admin had it deployed via GPO but new sys admin deleted said policy. 

 

Operating Systems:

Comments 6 CommentsJump to latest comment

.Brian's picture

There is no best practice per se as it's really up to you and your network requirements.

How many clients? Multiple locations? Bandwith should be a priority.

SCCM would be easiest

Very helpful link here:

Top 10 Symantec Best Practices - Deploying Symantec Endpoint Protection Architecture

Article:TECH92051  |  Created: 2009-01-27  |  Updated: 2013-05-27  |  Article URL http://www.symantec.com/docs/TECH92051

 

What's required for remote deployment

Preparing Windows operating systems for remote deployment

Article:HOWTO80805  |  Created: 2012-10-24  |  Updated: 2013-10-07  |  Article URL http://www.symantec.com/docs/HOWTO80805

 

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

pete_4u2002's picture

why not push through SEPM? or you can use any third party tool.

SEPm3's picture

About 1200 clients, about 6 locations, relatively good connectivity to most locations. I agree that using sccm is the best solution but our sys admin has no experience with sccm and now it has become my word against his.

 

He's been here for years and I am new. Having a hard time convincing his supervisor about the benefits of sccm let alone deploying SEP via GPO.

.Brian's picture

I would be most focused on bandwidth and pushing clients over the WAN. It is definitely doable though as I've pushed clients via the SEPM over a VPN link with good results.

If you can schedule this accordingly I think you should be fine. I would test out a few PCs at each location and go from there.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

P_K_'s picture

There is no best method as such, all methods are good. We as admin need to take a call based on the our environment , our requirement and the type of users on whose machine we want to install the product. Taking these into account you have find a middle path.

The options that you have is:
1. Migration and Deployment Wizard.
2. Sharing the client exe
3. Weblink
4. SCCM
5. GPO
I personally don't have any issue with GPO option, if you want to go by that here are the options.

When Installing Symantec Endpoint Protection 11 by Active Directory Group Policy Object, Which Method of Deployment is Supported?

http://www.symantec.com/docs/TECH91330

About installing clients with Active Directory Group Policy Object

http://www.symantec.com/docs/HOWTO26773

Creating a GPO software distribution

http://www.symantec.com/docs/HOWTO55429

MCT MCSE-2012 Symantec Technical Specialist (SCTS)

.Brian's picture

Do you need more assistance with your problem or were you able to get it resolved?

If you could post an update for followers of this thread that would be most helpful.

Otherwise, if resolved, you can close the thread out by clicking the "Mark as solution" link at the bottom left on the most helpful post. If multiple posts helped to solve your problem, please click the "Request split solution" link at the bottom left, select the most helpful posts and click the "Submit" button. This will benefit admins looking for a resolution to the same problem.

Thanks and take care,
Brian

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.