Video Screencast Help
Symantec Appoints Michael A. Brown CEO. Learn more.

How can I make sure that the newly joined domain computer gets SEP client ?

Created: 03 Sep 2012 • Updated: 05 Sep 2012 | 15 comments
This issue has been solved. See solution.

Hello All,

How can I ensure that newly joined WIndows Server and workstation can get the Antivirus client installed and updated ?

Comments 15 CommentsJump to latest comment

Ashish-Sharma's picture

Hi,

How can I make sure that the newly joined domain computer gets SEP client ?

Without any Clone Image SEP client not install any Desktop or server automatic.

You can use Clone image on Desktop Installation,but you can folow steps when you will br create clone image.

How to prepare a Symantec Endpoint Protection 12.1 client for cloning

http://www.symantec.com/business/support/index?page=content&id=HOWTO54706

Thanks In Advance

Ashish Sharma

 

 

John Santana's picture

So SEPM server will not query the AD on regular basis to automatically include and install the SEP client ?

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

Ashish-Sharma's picture

No,

In that case you can use GPO

Check this thread

How to used GPO to install SEP clients? Any other ways with cheap or free method

https://www-secure.symantec.com/connect/forums/how-used-gpo-install-sep-clients-any-other-ways-cheap-or-free-method

Thanks In Advance

Ashish Sharma

 

 

SOLUTION
pete_4u2002's picture

sepm will query the AD if you have synched OU, however it will not push SEP client to the machines if they are not installed.

You need to find them using unmanaged detector and install it. Or use the image with SEP client and make sure you have followed these steps before applyingthe image on new systems

http://www.symantec.com/business/support/index?page=content&id=HOWTO54706

John Santana's picture

Is there any instructions to make sure that SEPM query the AD ?

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

John Santana's picture

unmanaged detector and install it --> What is that ?

AFAIK my laptop has been configured as that, but I cannot understand how it works.

 

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

pete_4u2002's picture

What does it mean to set a client as an Unmanaged Detector?
http://www.symantec.com/docs/TECH105722
 

Find Unmanaged Clients on a remote network location using the Unmanaged Detector
http://www.symantec.com/docs/TECH96234
 

Setting notifications when using the "Unmanaged Detector" feature in the SEPM
http://www.symantec.com/docs/TECH104897
 

John Santana's picture

and also does this article still applies to SEP v12.1 RU1: 

 

Best Practices: When to use the "Find Unmanaged Computers" or "Unmanaged Detector" features in Symantec Endpoint Protection 11.0

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

Mithun Sanghavi's picture

Hello,

Atleast yes, for the Unmanaged Detector.

What does it mean to set a client as an Unmanaged Detector?

http://www.symantec.com/docs/TECH105722

In SEP 12.1, "Find Unmanaged computers" Feature has been removed. With SEP 12.1, we decided to merge the old clientremote tool and Find Unmanaged Computers into one.  The new version is called the Client Deployment Wizard.

Check this Thread:

https://www-secure.symantec.com/connect/forums/where-did-find-unmanaged-computers-go-121

https://www-secure.symantec.com/connect/forums/find-unmanaged-computers-3

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

John Santana's picture

Many thanks, I guess the pre-approved cehcklist is the best due diligence to follow to make sure that every new server built and workstation got the Anti Virus.

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

andrewparkes's picture

GPO is one way. Another way I find easiest, but depends on how your deployment solution (if you have one) works...

We have it set up as part of the MDT task sequences, so the last thing it does before joining the PC to the domain and rebooting is install SEP. Works a treat. Similar options wills be available in most deployment solutions I'd imagine

John Santana's picture

Andrew,

May I know what is MDT ? Microsoft Desktop Tollkit ?

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

andrewparkes's picture

Microsoft Deployment Toolkit. Been around a few years now, free bit of software from Microsoft for an image based deployment solution. Sort of a cut down version of SCCM for deployment only

 

http://technet.microsoft.com/en-us/solutionaccelerators/dd407791.aspx

 

 

John Santana's picture

Cool, many thanks for the assistance and explanation !

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.