Endpoint Protection

 View Only

  • 1.  Client Deployment Wizard - Push not working unless logged in

    Posted Mar 02, 2015 10:40 PM

    When using the Client Deployment Wizard to push the client or even just a Communication Update Package, it fails for machines without a user logged on (wizard reports failure) . If I log onto the client machine and retry the wizard, the deployment works.  This happens for both XP and Win7 clients, most of which have 11.x client installed, but some have unmanaged 12.x client.  This is a real pain, is there a fix?  Using latest 12.1.5 SEPM.



  • 2.  RE: Client Deployment Wizard - Push not working unless logged in

    Posted Mar 02, 2015 10:43 PM

    Wasn't aware this was the case...at least I haven't seen this with 12.1.5

    What if you try applying an upgrade package instead?

    Upgrade Symantec Endpoint Protection 12.1 clients using AutoUpgrade



  • 3.  RE: Client Deployment Wizard - Push not working unless logged in

    Broadcom Employee
    Posted Mar 03, 2015 05:27 AM

    Hi,

    Thank you for posting in Symantec community.

    There are some pre-requisites to make remote deployment successful.

    Perform the following tasks:

    • Disable the Windows Firewall, or configure the firewall to allow the required traffic.

    • Disable the Sharing Wizard.

    • Enable network discovery by using the Network and Sharing Center.

    • Enable the built-in administrator account and assign a password to the account.

    • Verify that the account has administrator privileges.

    • Disable or remove Windows Defender.

    Check this article for more details: Preparing Windows and Mac computers for remote deployment

    http://www.symantec.com/docs/HOWTO81300

    Still failed, can try other methods of deployment.

    About client installation methods

    http://www.symantec.com/docs/HOWTO81302

    Note: You might be aware of this however SEP 11 product has reached End of Life, upgrade all the clients to the latest version of SEP (12.1 RU5)



  • 4.  RE: Client Deployment Wizard - Push not working unless logged in

    Posted Mar 03, 2015 06:01 AM

    are these machines in a domain or workgroup?

    the account used by SEPM should have access to Admin share on the remote machine and access to remote registry, its more of a permission issue, 

     



  • 5.  RE: Client Deployment Wizard - Push not working unless logged in

    Posted Mar 03, 2015 08:07 AM

    The machines are in a domain, and SEPM is using the domain admin password, so it shouldn't be permission related.  It works when someone is logged on, even if the logged on user is not an admin, so that wouldn't reflect a permissions issue.



  • 6.  RE: Client Deployment Wizard - Push not working unless logged in

    Posted Mar 03, 2015 08:12 AM

    Would need to have the clients in an SEPM group first, which is what I'm trying to acccomplish by deploying a Comm update package, and that's not working for logged off machines.



  • 7.  RE: Client Deployment Wizard - Push not working unless logged in

    Posted Mar 03, 2015 08:36 AM

    This issue doesn't ring any bells for me either I'm afraid.

    As a workaround, you could use sylinkdrop with psexec?  Or ping out via logon scripts as below?

    https://www-secure.symantec.com/connect/forums/sep-1107-sepm-1212-communication-update-package-fails



  • 8.  RE: Client Deployment Wizard - Push not working unless logged in

    Posted Mar 03, 2015 09:28 AM

    The person in that post seems to have a similar issue, perhaps even the exact same issue and they just didn't realize that the difference between machines that worked and did not work was whether a user was logged on or not.  In any case, I'll just try pushing the comm update package in the middle of the day when most users will be logged on, that should be easiest path.  Hopefully the subsequent package auto-upgrades will work for logged off machines.

    According to this article:

    http://www.symantec.com/business/support/index?page=content&id=tech164327
    "The installation *should* succeed even when no users are logged on to their computers"  

    I added the emphasis on "should", as I took that to possibly mean it may not be 100% reliable with no one logged on.



  • 9.  RE: Client Deployment Wizard - Push not working unless logged in

    Posted Mar 03, 2015 09:33 AM

    I can only speak from experience in that it has worked for me whether users are logged in or not.

    You could always go the support route if you have time.