Endpoint Protection

 View Only
  • 1.  NTP always installs via .msi in a GPO in AD

    Posted Jun 23, 2009 05:47 PM
    Whoa, lots of acronyms.

    I am attempting to create a software deployment of Symantec Endpoint Protectoin 11 MR4 SP2 to deploy via group policy. I have read and understood the user's manual on this section.

    When exporting the package, I select the option to only install Antivirus/Antispyware and PTP. Great!

    BUT, when this package deploys, the NTP healthily runs, unphased by my attempts to subdue it.

    Any advice, Symantec Veterns?

    Aaron
    Memphis, TN


  • 2.  RE: NTP always installs via .msi in a GPO in AD
    Best Answer

    Posted Jun 23, 2009 06:05 PM
    This happens because when deploying via GPO, the installation does not query the "setaid.ini" file which specifies what components to install/enable.

    There is workaround to fix this problem... Check the following document...

    When installing SEP clients using GPO the clients get all features installed instead of only the features set in the installation package
    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008062706342848


  • 3.  RE: NTP always installs via .msi in a GPO in AD

    Posted Jun 23, 2009 06:14 PM
    By default, Network Threat Protection is enabled. You may want to disable Network Threat Protection on selected computers. For example, you might need to install a patch on the client computers that would otherwise force the firewall to block the installation.

    If you disable Network Threat Protection, it is automatically enabled when the following happens:

    The user shuts down and restarts the client computer.

    The client location changes from server control to client control.

    You configured the client to enable protection after a certain period of time.

    A new security policy that enable protection is downloaded to the client.

    Threat protection from the Symantec Endpoint Protection Manager?





    How to disable Client Network Threat protection from the Symantec Endpoint Protection Manager

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007111211492548





  • 4.  RE: NTP always installs via .msi in a GPO in AD

    Posted Jun 23, 2009 09:08 PM

    A plate of cookies is your reward!