Endpoint Protection

the SEP 11.0.5.333 client version got installed on a W2K3 server. Can we just install the Server client version of 11.0.5.333 to get rid of the extra items that appear on the STATUS page?

Do not want to upgrade to 11.0.6 yet. Thanks

if i understand correctly, the client is installed on Win 2k3 server. There is server ( SEPM) and other is client (SEP), client needs to be installed to machine to protect against malware. SEPM will not protect the machine, it is kind of policy manager.

I'm suspecting you mean that there are features for workstations that you do not want on your servers?

If that is the case you should be able to simply modify the install of the SEP client installed to the server through add/remove programs. You can then select which features you don't want on the client and choose to not have them installed. Once the modify install completes you may need to reboot the server to complete the changes. If you have Network Threat Protection installed and are removing that feature it will require a reboot to complete. Therefor I would recommend to not make this change unless you can reboot the server following the modification as you may lose network connectivity until after the reboot has occured.

Another option here would be for managed clients. If the client you have installed to the server is managed and reporting to a group of machines that also have the same exact features installed to them, you can assign an install package to the clients' group that will automate the modification of the clients' package if it is not the same as what is assigned.

The document I have linked below will assist you with both of these options.

http://www.symantec.com/business/support/index?page=content&id=TECH90936&locale=en_US

What are the extra items you are referring to?

If SEP components then yes..you can install only Antivirus and Antispyware on the server.

The SEPM is setup not to handle installs or upgrades. We have to install and upgrade the LAN's

servers manually and workstations too. This is why the client version was mistakenly installed on a server.

Another question, why did't the install program stop the  client upgrade since the server was not a workstation. What is the difference between the two packages? Are they the same but with a ini file that tells it that it is a workstation or server  by what package you install? Thanks

The packages do not know the difference between a server and a workstation. This is why there is no warning about what you are installing to. 

From what you've stated it sounds like you either have exported installation packages from the SEPM server, or you are running the installation that is included in the downloaded media. If you ran the install from the downloaded media this would be an interactive install and would walk you through the installation process. An exported package could be set for interactive,

If you are running an install exported from the SEPM it may include custom feature sets, such as not including NTP or PTP in the install. Simply because this package may be named ServerSetup.exe does not mean that it can only be installed to a server. It simply means that the package was named such to associate it with what features you want installed to servers.

Since our product supports both Workstation and Server oprating systems it is not going to, by default, throw any errors. You could possibly modify the MSI with ORCA to create an OS specific requirement however this would be unsupported by Symantec and a do at your own risk scenario.

>> What is the difference between the two packages?

Which two packages exactly? The packages you see in Admin-Installation packages - Client installation packages are "raw" packages that can be exported to "real" installation setup.exe files by appying to them settings like set of features to be installed, etc.

What do you mean by "client version"?