Endpoint Protection

How do I give Limited Administrator rights to deploy package, i.e. on top right corner of SEPM console select "Install protection client to computers". 

When I click "Manage installation packages" and select "Read Only", nothing happens. If I select "Full Access" then the Limited Administrator can deploy packaged, but also create and modify packages, which is what I don't want.

Those are the only two options. It's either all or nothing.

There's another way to do this.  Assuming you've already exported the client, you can get the Limited Administrator to use the "Push Deployment Wizard" (foud in the Part_2 download from FileConnect) instead.

This version of the wizard doesn't create packages for you (which is why you'll need to have created ad exported a client installer first), but does the whole push install side of things.  Being a separate tool too, it's is not affected by the permissions you assign to the Limited Administrator.

Just bear in mind, the target machines will still need to meet the general requirements for push install (admin rights, admin$ share access, remote registry service running, blahblahblah).

#EDIT#

Bit more info in the below articles:

http://www.symantec.com/docs/TECH183172
http://www.symantec.com/docs/HOWTO80805

So in other words, Limited Admins can only use "Push Deployment Wizard"

What you're want can't be done from the SEPM. You can use puish deploy which is a standalone tool.

Please vote for my idea, https://www-secure.symantec.com/connect/ideas/allow-limited-administrator-install-protection-clients-computers