Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Endpoint Protection Installation - requirements for a domain

Created: 19 May 2010 • Updated: 21 Jun 2010 | 7 comments
This issue has been solved. See solution.

Hi,

We would like to install Endpoint Protection on a Windows 2008 server and deploy the AV client on all domain workstations.

Questions :
does the Endpoint Protection server need to be a domain member ?
If not, would we have all the functionnalities even if the server is not a domain member ?

Thanks for your help

Regards

Comments 7 CommentsJump to latest comment

Koosah's picture

I have ran the management console on machines not in a domain and had no issues, I did have the same user that was part of the local administrators group on all machines which is what you would need if not part of the domain to push the install to multiple clients.

Symantec Technical Specialist

Please don't forget to mark which thread solved your issue!

Ryan_Dasso's picture

@ "does the Endpoint Protection server need to be a domain member ?"
No.

@ "If not, would we have all the functionnalities even if the server is not a domain member ?"
N/A

Longer answer:
From a purely SEP focused standpoint, there really isn't any major advantage to having the SEPM computer on the domain. You do not lose any functionality when it's on or off a domain.

There are obvious benefits for having your servers on a domain, but none when it comes to SEPM's functionality.

quickvic's picture

From my understanding, as long as the server hosting SEPM can access the target machines hidden share C$ with local/domain admin credentials, you're good to go.

Vikram Kumar-SAV to SEP's picture

In XP -Uncheck -Use simple File sharing in folder options

C$ and Admin$ share should be available. You should be able to ping the client from server and vice-versa

WIndows Firewall port should excluded for communication ( 8014 )
 In Newer OS UAC should be turned off.

and for deployment you need to use Administrator Credentials ( Domain/Local )

It doesn't matter if its Domain or Workgroup.

Vikram Kumar

Symantec Consultant

The most helpful part of entire Symantec connect is the Search button..do use it.

SOLUTION