Video Screencast Help

How do I deploy SEP Policies to machines which will never connect to the SEPM?

Created: 14 Jan 2008 • Updated: 21 May 2010 | 2 comments
DarkHorseSki's picture

I want to deploy SEP policies to some standalone computers and standalone networks but want to know how to go about either copying the appropriate policy info from a SEP client that is attached to the manager, or exporting appropriate policy directly from the manager to import into the client.

I know there is a Symantec Engineer working on a whitepaper for these "lightly managed" clients but because he was not ready to submit it, he wouldn't give me a copy (this was the last week of December).  So, I hope that I can get some appropriate answers from this venue.


Comments 2 CommentsJump to latest comment

JohnL's picture
If you have an existing client group with policies assigned that you would like to apply to these stand-alone workstations, you can export a client install package with the policies of that client group.
1. From the Admin section of SEPM, click on 'Install Packages' at the bottom.
2. Select 'Client Install Packages' at the top, then click 'Export Client Install Package'.
3. Choose the location where you want to export the package to.
4. Optional - check 'Create a single .EXE for this package'.
5. Choose the Settings and Features you'd like to use.
6. Select 'Export and unmanaged client' under Policy Settings.
7. Check 'Export packages with policies from the following groups' and choose the corresponding group that has the policies you'd like to use.
8. Click OK.
From there make the exported package available to the stand-alone workstations to install. Keep in mind if you want to make any policy changes on these workstations, you'll have to export an updated package and run the install on them again.
Hope this helps.
DarkHorseSki's picture

Thanks, that is pretty much the mechanism that I would try.  The problem is the deploying of new policies only.  Apparently there is a way to deploy just the policies (maybe in an .xml file or something like that) but I don't know the nuts and bolts of that method.  WHEN I do get that info, I'll post it back up here.