Endpoint Protection

 View Only

  • 1.  Manual deployment versus MSI and GPO installation

    Posted May 11, 2009 07:48 PM
    ( I'm french user...sorry for my english )
    Hi,
    We have GPO and MSI deployment for SEP MR4. ( Based on OU group SEPV11)
    It works fine..no problem.
    But my question is :
    When I make manual install for some reasons on a computer outside the OU group SEPV11 ( no problem )
    But after that, if I move this computers in OU group SEPV11, when the computer start, the MSI GPO start and REINSTALL Symantec Endpoint Protection !!!!
    It's seems like installation via my GPO MSI consider that SEP is not present on this computer !!!!

    Some ideas....
    Thanks
    Best Regards


  • 2.  RE: Manual deployment versus MSI and GPO installation

    Posted May 11, 2009 08:12 PM

    I think:

    Movement of a Computer in the SEP-OU would result in the enforcement of the Software Installation Group Policy on the New Computer as it a new object in the OU which does not have the OU Policy applied to it before.

    This is how AD policy flows OR is enforced to all new objects introduced

    Thanks :)



  • 3.  RE: Manual deployment versus MSI and GPO installation

    Posted May 12, 2009 12:23 AM
    Based from Kedar, it it possible for you to create a separate group for them?