deployment in my company goes very slow

tylerMK's picture

hi all

In my company i have migrated all users from AV 10 to SEP11 exept for a (not so) small portion of 200-300 PCs. The deployment via PushDeployment and via Policy was somwaht succesfull but a big number of WS still have symantec 10 install. i figured that if i run the Windows installer Clenup and remove the old version, the new version is going to deploy very nice. But i cannot do this activity on all of the PCs manually.

Please give me recomendations on how to deploy SEP11 on the remaining PCs in my network.

Best regards

Prachand's picture

If this the case then You can

If this the case then You can share the exe among the users and ask them to run locally instead.

Prachand Kumar
MCSE-2003 Symantec Technical Specialist (SCTS)

Fatih Teke's picture

cleanwipe

Hello tylerMK
You can use cleanwipe program for uninstall.
it uninstall all Symantec aplications.
and you can deploy new SEP with puchdeployment as you said.
you can add txt file for ip adress.
If you can export pc's ip address like this;
10.0.1.20
10.0.1.21
10.0.1.22 etc. you can write them notepad and deploy.
Thanks
Fatih

------------------------------------------
Everything works better when everything works together.

Bill_K's picture

To speed up SEP deployment

To speed up SEP deployment (and deployment of applications in general) we have machines auto-power on at about 1am in the morning.  You can do this through a BIOS setting on the machine in lieu of WakeOnLAN.  Then when we started pushing out SEP we set the package to start at 1am so most users didn't have to sit throught the upgrade (and the network hiccups that occur therein).

tylerMK's picture

the wakeonline is not setup

the wakeonline is not setup on the domain pc, on the other hand the users do not have admin permisions to install the aplication localy. My point was that even if the users have permisions, the new version of SEP11 cannot be installed unless the Windows installer Clenup removes the old version first. Please understand that the majority of the users are not technical persons so i will need to do the installation on all systems.
ah yes. The removal of all symantec products of a pc is not acceptable, cause we have symantec vault installed on the pcs

Nel Ramos's picture

better to run a script so non

better to run a script so non techy user will just execute it...
thanks..

Nel Ramos

AravindKM's picture

Try this

 http://it.toolbox.com/blogs/locutus/how-to-silently-and-remotely-remove-symantec-antivirus-14625
https://www-secure.symantec.com/connect/downloads/...

tylerMK's picture

does anyone has a script that

does anyone has a script that automatically removes the old versions of Symatec AV (10.5, 10.6, 10.7) and removes all traces of these products. And can this scipt be used on a big group of users simultaniouslly and offcours remotely.

tylerMK's picture

p.s. this is a enterprise

p.s. this is a enterprise version of the software so the uninstall is password protected

Prachand's picture

See if this helps How to

See if this helps

How to uninstall the Symantec Endpoint Protection Client using the MIcrosoft Installer
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007091209261948

Prachand Kumar
MCSE-2003 Symantec Technical Specialist (SCTS)

Prachand's picture

You can get Cleanwipe but for

You can get Cleanwipe but for that  you have to call / contact symantec technical support

Prachand Kumar
MCSE-2003 Symantec Technical Specialist (SCTS)

tylerMK's picture

ok this is the final

ok this is the final situation

I got the cleanwipe software but this SW will erase everything i have from symantec. I dont want to do this. I want to erase just the installation files & reg keys from the system that were created during installation with win instaler. This is my problem since the begining.

As i said before the installation goes very nice once the windows installer cleanup is used on Symantec AV first.
So my questtion is this: can someone give me the txt files from which the bach files for the Cleanwipe were created, or tell my which batch from all of them does that what i described. I really dont have a lot of free time to create batch scripts from scratch :))

Sandeep Cheema's picture

I think I have it ready what you are looking for..

I think I have it ready what you are looking for....minor changes...You have to tell me though where the SEP package will be.....You are pushing it with SEP deployment wizard or over a share....?

Sandeep Cheema's picture

By what I read, I think you

By what I read, I think you can afford to use the SEP wizard to deploy.

http://uploadfile.org/complete.php?id=lMBYLc2pTD5K...

Keep this as setup.exe, Rename your single exe to setup1.exe. Store them in one folder and push it...(Select the folder where these files are......). Let me know if it needs fixing, I havent tested after the modifications......No trimming required. It picks up the product code for uninstall.......Logs and source are in c:\windows\system32\SEP_Migrate on the client........

tylerMK's picture

i' m using the pushdeploy

i' m using the pushdeploy remote client tool from symantec to install.

i would like to try your solution Sandeep but when i try to go to the like you provided i get the: Sorry! Link expired

can you provide me with another link please

tylerMK's picture

I've tried your proposal

I've tried your proposal Sandeep but it doesn't work. The log from the push deployment says that the installation was finished, but the when i checked the pc i found that only the liveupdate was installed and not the SEP.

the log that you mentioned under c:\windows\system32\SEP_Migrate does not exists

AravindKM's picture

  refer the below blog entry

 

refer the below blog entry by Rafeeq Connect And Protect
Story - SAV 8 to SEP 11
.

he is explaining his experience with a deployment of
SEP11.He was having an environment a mixture of sav 8&10 .This may be
useful for you

tylerMK's picture

the solution mentioned in the

the solution mentioned in the article was already tried. I have another type of problem. Under uninstall in reg. there is no value for symantec av. so I cannot use this metod.

After all there it seems that there is no automatic solution for my problem so i would have to manually run windows installer cleanup utillity and remote the signatures left by the msi installer for the sav 10 versions and then install the SEP 11

but i would give it a couple of days if you all have any other ideas

Sandeep Cheema's picture

tylerMK says "Under uninstall

tylerMK says "Under uninstall in reg. there is no value for symantec av."

......You have a real problem there...........

Hiren_Trivedi's picture

ok

ok

Vrakas Bassilios's picture

In your case since you dont

In your case since you dont have registry information about the uninstaller of your version the only option is to run NoNAV (utility from symantec) that you can setup as a script to remove automaticaly all known registry and file info regarding SAV 8, 9 ,10 without using uninstaller information.
A simple google search with nonav as an argument will give you download information.
It has solved my problem in many cases where I had corrupt SAV 8,9 installations that gave an error whenever I tried uninstalling themm either automaticaly or manualy.