Video Screencast Help

How to install SEP client in unmanaged machines remotely.

Created: 23 Nov 2013 | 19 comments

How to install SEP client in unmanaged machines remotely. I got notifications from SEPM server on unmanaged detector report. How can I push the client package remotely from SEPM server

Operating Systems:
Discussion Filed Under:

Comments 19 CommentsJump to latest comment

James007's picture

Check this

How to install clients using "Find Unmanaged Computers" in the Symantec Endpoint Protection Manager

 

Article:TECH103107 | Created: 2007-01-15 | Updated: 2011-01-06 | Article URL http://www.symantec.com/docs/TECH103107

 

AJ_01's picture

What is your SEPM version?

For SEPM 11.x you can use find unmanage Client

How to install clients using "Find Unmanaged Computers" in the Symantec Endpoint Protection Manager

 

Article:TECH103107  |  Created: 2007-01-15  |  Updated: 2011-01-06  |  Article URL http://www.symantec.com/docs/TECH103107

https://www-secure.symantec.com/connect/forums/sepm-clients-find-unmanaged-computers-installation-package-fails#comment-9118041

For 12.x use the unamange detector

https://www-secure.symantec.com/connect/forums/symantec-endpoint-protection-121-and-find-unmanaged-computers#comment-6502021

Regard

AJ

.Brian's picture

Hello Kalai.

You are on the right track using the unmanaged detector to find clients that are unmanaged. Once that is finished, you have a few options. Please look over these articles:

About client deployment methods

http://www.symantec.com/docs/HOWTO80807

Deploying clients by using Remote Push

http://www.symantec.com/docs/HOWTO80788

 

Let me know if I can be of further help.

Brian

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

JS@support's picture

Hello,

It's pretty simple.

Make the list of those machine with the help of either IP address or Hostname.

Run the client deployment wizard (CDW) & use the list of IP address to deploy new SEP clients on it.

 

Kalai7610's picture

Whether any network ports needs to be enabled for SEPM to SEP client.?

James007's picture

If you are using CDW method

Ports used for client software deployment with the Push Deployment Wizard

 

Client computers

Symantec Endpoint Protection Manager

TCP 139 and 445

Ephemeral TCP ports

Ephemeral TCP ports

TCP 139 and 445

UDP 137, 138

UDP 137, 138

 

Mithun Sanghavi's picture

Hello,

Check this Article and follow the steps within it - 

Overview of Push Deployment Wizard in Symantec Endpoint Protection 12.1

https://www-secure.symantec.com/connect/articles/overview-push-deployment-wizard-symantec-endpoint-protection-121

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Kalai7610's picture

I am getting below error while pushing the client from SEPM server to client machine(where SEP is not there)

error.png
.Brian's picture

Follow this link

http://www.symantec.com/docs/HOWTO80805

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

James007's picture

Did you try local admin password ?

 

Please ensure the account being used to deploy the SEP client has sufficient privileges and is not a restricted account. In most situations, it is most appropriate to use a domain administrator account. If this is not possible, use a local administrative account for the remote computer, but be aware of the UAC restriction (above).

Remote deployment of SEP 11 clients from the SEPM to other domain member computers may fail due to Microsoft changes in the networking defaults of Windows 7 and above. When the local system account connects to other computers that are not in the same domain it uses a NULL session (which allows SEP client deployment). When local system connects to other computers that are in the same domain it tries to use the computer name to authenticate. In older Windows versions this connection could by default fallback to a NULL session. In Windows 7 and above the default behavior does NOT allow this fallback. The solution is to updgrade the SEPM to SEP 12.1; a workaround for SEP 11 is to run the SEPM service as domain administrator or add the SEPM's Active Directory computer account to an Administrative Group

http://www.symantec.com/business/support/index?page=content&id=TECH165133

Kalai7610's picture

12/05/13 20:19:37 - -----------------------------------------------------------
------------------- -- ClientRemote.exe ---------------------------------------
------------------- -----------------------------------------------------------
12/05/13 20:19:37 - Deployment Failed for: XXXX

 

 

error Please help?

James007's picture

Do you have try domain administrator or local admin account ?

Kalai7610's picture

I have tried all the local and domin account it is not working. Please help?

AJ_01's picture

Disabl the firewall of client system and try again.

Regard

AJ

Frank Quijano's picture

Any updates?

I just noticed the tag "AIX" on this question. Hope it's just a typo error.

To address the authentication issue, you might want to ask the user himself his credentials should it is different from your Active Directory (might be using his own local account).

Also, I have experienced before that the hard disk space of the ones you are deploying might not be enough for the installation. Advise the user to try clearing up unnecessary space before doing the required procedure prior to installation.

If you can't stand the heat, get out of the kitchen!

AJ_01's picture

Have you tried to deploy the client after disable firewall

Regard

AJ