Endpoint Protection

SEP Network Threat Protection stops HP NCU working on Proliant servers, see link below:

http://sbcengine.blogspot.com/2009/07/hp-ncu-vs-symantec-end-point-security.html

To solve this I have created an SEP 11 package (msi) from SEPM with only the AV components. This is then deployed to via ConfigMgr (sccm) to the server as part of an OSD tasking.

I can install the msi manually and it will only install the AV component. When deployed via SCCM all components are installed, including Network Threat Protection. 

Its SEP 11Mr4 (64)
on Proliant BL's
Windows 2008 Sp2 (64)

Anyone know how to deploy SEP AV component only from SCCM.

Thanks

There is an MSIFAQ.txt file on the CD to read up on for the correct switches or transform file to use.

Make sure no install packages are assigned to any groups. 

And Read this
https://www-secure.symantec.com/connect/forums/installation-package-installs-all-components-when-i-only-want-antivirus

 Tis a shame you have a product that can only deal with msi files...  Something like Altiris, LANDesk, BigFix, etc all can do msi, exe, etc...  Makes deployment much easier when you are not restricted to just msi.

SCCM is as capable as the others at deploying .exe, bat etc. Its just easier with .msi files. Used both Altiris and LandDesk, SCCM has its issues, but once you get your head around its complexity, its a real joy to work with, love Desired Config and OSD. Currently replancing LandDesk with SCCM.

 However to solve this I would recommend to use MR5 package as it will not cause the above issue on 2008 64 bit servers. Then assign the package on the groups with the same package of just AV n ASpy once your SEP clients connect to SEPM they will automatically remove Proactive Threat Protection  and Network Threat  Protection.

I'm very lucky where I work, it only took the team tasked with delivering SEPM 5 weeks to install. They even managed to forget the polices. So I have more chance of getting blood out of a stone than get an upgrade. Will go to work on Monday and beat up the concerned muppets. If nothing else it will make me feel better. Thanks

Just tried fix:

Logged on to SEPM

Browsed to Clients > Group

Added the client package to the Installed Packages tab

Enable only AV

Updated client on test server.

Worked a treat.