Deploy endpoint agent via GPO? Not startup script.
I have already seen the Symantec page that shows how to deploy using an AD startup script GPO. However I'm wondering why they suggest a startup script rather than GPO Software Installation with advanced option to use the transform?
Is there any reason a Software Installation GPO for the endpoint agent msi file plus transform will not work properly? It seems like it would be easier and will natively install only once without any of the extra hacks that are needed to prevent a startup script from reinstalling the agent on every restart of the PC.
A software installation GPO will also support some options that installing via startup script will not such as future upgrades as well as uninstalling by simply removing the policy.