Endpoint Protection

To address a known issue, I need to deploy SEP 11.0.7 to a handful of PCs (via Altiris) running managed SEP 11.0.5.  Didn't want to upgrade my 11.0.5 SEPM just for this; especially when I'm hoping to move to SEPM 12.1.4a in the near future.  Anyhow, came across the following tech article regarding installer command-line switches.

http://www.symantec.com/business/support/index?page=content&id=TECH102668&locale=en_US

If I want a silent install but don't wish to include NTP and Application & Device Control, is this possible via a single setup.exe command-line?  For manual installs of SEP 11.0.7, I have our techs run setup.exe, opt for a Custom install, disable NTP and App/Device Control after which I have them use a sylink.xml to direct the client to my 11.0.5 SEPM.  This has worked out well although now wish to automate this install.

Not sure if I'm interpreting TECH102668 correctly where it appears the parameters to add/remove components is for situations where SEP has already been installed.  Again, I want to do an install with all options selected except for NTP and App/Device Control.  As for my sylink.xml file, was hoping that simply replacing the existing one in the SEP file distribution folder would make the SEP client a managed one.

You would need to edit the setaid.ini file but the package needs to be created as an MSI.

Yea, you should just be able to replace the sylink in the package, but again, needs to be exported as MSI (uncheck "Create a single. EXE file for this package")

Please keep in mind that I'm not creating this package from my SEPM but wish to do a custom install straight from the SEP 11.0.7 client source files and making it a managed client in the process.  Now if I could somehow create a SEP 11.0.7 package from my 11.0.5 SEPM then that'd be cool.

FYI: Speak of the devil in regard to my last comment on creating a newer SEP package on my older SEPM.  Found the following when I searched the KB.  Now whether it actually works or not has yet to be seen.

http://www.symantec.com/business/support/index?page=content&id=TECH122824&actp=search&viewlocale=en_US&searchid=1401312098561

Yes should still work as long as you can edit setaid.ini