OK.  How do I "redeploy"?  When I was moving clients from 10.2 to 11, I was using the "Find Unmanaged Computers" option under the Clients tab.  I don't want to go to every computer I've deployed so far and manually choose their features.  Thanks!

Jim

OK.  I found the ClientRemote.exe file.  It's kinda weird that it's not in the Program Files under Start Menu.  Kinda janky that it's not included in the Management tool to begin with.  So what I ended up doing was exporting a single install file for each of my groups that will grab the install features that I choose.  I then push that out to clients using the ClientRemote.  I wish there was an easier way where I could simply check a box in a policy to turn on and off the components ( Proactive Threat Protection, Network Threat Protection) in the managment console, but I guess if I have to do this, I have to do this.

Here is how things are supposed to work as I understand the documentation.

New version of software is imported into Client Install Packages in the SEPM console
Admin\Install Packages
    Client Install Packages
       Add Client Install Package.

Create Client Install Settings

Admin\Install Packages
    Client Install Settings
       Add Client Install Settings

I've typically chossen Remove all previous logs and policies.  We are trying to reconfigure clients with a different set of modules.

Create a Client Install Feature Set.
   
Admin\Install Packages
    Client Install Feature Set
       Add Client Install Feature Set.

I've typically used the default  Antivirus, Antispyware, Proactive Threat protecton.

Next I assign the Install Package to a managed group.

Select Clients\Install Packages.

Add Client Install Package or Edit an existing package.

Again, we uncheck the maintain existing client features when updating, choose our prefered feature set.  

Now according to the documentation all our happily managed 11.0.780.1109 clients should pull down the new 11.0.1000.1375 clients reinstall and reconfigure as defined.   Sadley that is not happening.  In our Liveupdate policy we have "Download Syamntec endpoint Protection product updates..."  checked.

Server Settings
    Used the default managment server..   checked
    Use a LiveUpdate server... checked
    Use the Grooup Update Provider as the default Live Update Server   Checked.

Still no updates.  I'd hate to do another deployment of my clients, but its looking like thats the way it will happen.

Everyone, thanks for your replies!

@danwilli

I see the Migration and Deployment Wizard.  Unfortunately, it's not in the documentation.  The Install Guide is telling me to go to Program Files then Symantec, then EndPoint Security, then the tomcat directory, then bin and run Client Remote.exe.  This would have been nice to have in the documentation, which I've stated in other threads, is less than desirable.

Update:  Since SEP won't re-install the current version of software when you change the install policy, I had to do this manually.  This is a major flaw in the product if you ask me.

Jim

JoeG,

Did you start out with 11.0.785 or did you start with 11.0.1000?  I started with 785 and upgraded to 1000.  I added 1000 as an "Install Package" under the CLIENTS tab.  But I was still installing all features.  After the update pushed out, we were having issues with peoples machines being slow.  So I moved 2 clients to the Temporary group, and had the 1000 build in place and then changed the Client Features to AV & AS only.  The clients never updated.  Did you have a different outcome?

Jim

Message Edited by JoeG on 01-21-2008 07:42 AM