SEP deployment using Altiris Integration Component

Updated: 21 May 2010 | 17 comments

0 0 Votes

I'm trying to deploy the SEP client to several test machines through Altiris. All of my Altiris integration component options are setup and working properly. My SEP client install packages are built and work correctly if deployed through SEP Manager or via unc path.

When I attempt to push the install package out through Altiris, the package downloads to the client pc, but gives me a status of "Run Failed" when I check the Altiris agent gui. So basically, I can get the install package to the client computer through Altiris, but the package fails to run/install.

Any help would be appreciated.

discussion Filed Under:

Security, Endpoint Protection (AntiVirus) - 11.x

Comments RSS Feed

Comments

Apr

2008

0 Votes 0

Paul Murgatroyd

Symantec Employee

Accredited

Certified

I dont have a SEPIC in front of me to check the wording, but can you check these:

1. Have you created a setup.exe install for SEP client and copied it to the correct location on the Altiris NS server?

2. Have you gone into the SEP client package on the NS server and UPDATED (or re-cached, I can't remember what its called) the package so it realises the setup.exe file is now there

3. Is the Altiris Client actually downloading the setup.exe file to the Altiris Agent folder on the destination PC?

4. Do you have the two extra components installed on the Altiris Agent (I think they are Task and Script?)

hth and sorry for some of the vague wording!

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint

Apr

2008

0 Votes 0

Jared Langlinais

1. I have created the setup.exe file and copied it over to the folder on the NS as indicated in the documentation.

2. I did "Update Distribution Points" so that the NS would identify the install package.

3. The Altiris client is downloading the setup.exe file on the client pc. Verified on the two test client machines that I am working with that each pulled the file down.

4. I do have the the Client Task Agent and the Script Task Agent installed on each test machine.

The install job fails immediately when the Altiris Agent runs it on the client. I manually invoked the job a few times and watched the task manager to see if the setup.exe process would launch. I never saw it run, so it looks like the job fails before it ever calls the executable.

Apr

2008

0 Votes 0

Paul Murgatroyd

Symantec Employee

Accredited

Certified

ok, next step would therefore be this:

open a command prompt on a client that has the package, and navigate to the package download location (you should see 4 files, one of which will be install.js...

run this command: cscript install.js <Enter>

Does anything happen then?

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint

Apr

2008

0 Votes 0

Jared Langlinais

Well, that would be my problem then. I don't have an install.js file included in the files that Altiris pushed out to the clients. All I have in the package that Altiris pushed is a folder and three files. Folder is named cache (setup.exe in this folder). 3 files are log.xml, package.xml, and snapshot.xml.

Any ideas why that file would not be there?

Apr

2008

0 Votes 0

Paul Murgatroyd

Symantec Employee

Accredited

Certified

is the file here on the NS?

\Program Files\Altiris\Notification Server\nscap\bin\win32\X86\ConnectSEP

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint

Apr

2008

0 Votes 0

Jared Langlinais

All I have in that path is the single setup.exe file. Should there be more there after an install package export from SEPM?

Apr

2008

0 Votes 0

Paul Murgatroyd

Symantec Employee

Accredited

Certified

that would indicate the SEPIC didn't install correctly.

how was it installed?

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint

Apr

2008

0 Votes 0

Jared Langlinais

Existing NS server, installed SEPIC, then installed SEPM.

Installed SEPIC from Solution Center>Available Solutions>Segments>Components>Symantec Endpoint Protection Integration Component on NS.

No errors or anything during install. Uninstall/reinstall necessary?

Apr

2008

0 Votes 0

Paul Murgatroyd

Symantec Employee

Accredited

Certified

you are starting to reach the limit of my Altiris knowledge I'm afraid... at this point I pick up the phone and call an Altiris guy :smileywink:

Do you have the following folder available on your NS?

C:\Program Files\Altiris\Setup Files\ConnectSEP

If so, try repairing that MSI and see if it adds the files.

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint

Apr

2008

0 Votes 0

Jared Langlinais

I do have that folder. I'll mess around with it to see if I can get things going.

Thanks for your help.

Apr

2008

0 Votes 0

Paul Murgatroyd

Symantec Employee

Accredited

Certified

no problem.. if you are still having problems, come back and I'll find someone who can help

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint

Sep

2009

0 Votes 0

early_morning

I noticed the threads on the

I noticed the threads on the SEP Integration Component. I am about to deploy several thousand clients. There are some articles on Group Policy deployment and I'm wondering which method is more robust. What is your opinion?

Any links would be appreciated.

thanks

Sep

2009

0 Votes 0

Clint

SEPIC Comments

I can only comment on the SEP Integration Component since I chose that route. Naturally this method relies on the client having Altiris on it and there are a few PCs in my environment where this isn't the case for whatever reason. We previously deployed SAVCE via NT logon script and I liked this method because, to me, it's not as finicky as GPOs and almost guaranteed to run 100% of the time. However, Symantec never included this deployment option in SEP (maybe login scripts are too old school?).

A Group Policy deployment would've had more complete coverage in my opinion where you wouldn't have to worry about a functioning Altiris Agent. On the flip side with SEPIC, you can more easily manage your computer collections via Altiris and target only machines you want SEP installed on. I required this scenario but it may not be a concern for you in your environment.

Anyhow, go through the SEPIC Release Notes where you'll find the Help pdf file extremely useful as well.

http://www.altiris.com/Support/Documentation.aspx#s

Clint

Apr

2008

0 Votes 0

Jared Langlinais

You da man, Paul.

I repaired that .msi, and it threw the necessary files in Program Files\Altiris\Notification Server\nscap\bin\win32\x86. Updated the distribution points in Altiris for the install package and re-pushed out to the test clients. Both downloaded and installed the packages as expected.

Thank you so much!

May

2008

0 Votes 0

Clint

Is running "cscript install.js" from my Altiris server the recommended procedure for manually installing the same package I created on my Altiris server for SEPIC deployments? I'm trying to work out procedures for machines without the Altiris Agent on them. Thanks!

Clint

Apr

2009

0 Votes 0

Paul Mapacpac

Re

We are having the same problem, we are migrating SAV clients to SEP, after the altiris job, SAV has been uninstalled but SEP is not installed.

Oct

2009

0 Votes 0

early_morning

The SEPIC works well but why

The SEPIC works well but why didn't Symantec put a task server piece in there for the oncey - twocy deployments? In fact why did you use software delivery over task manager?

There are some issues in our environment with MS Outlook. There is a SAV plugin that got loaded in the outlook Trust Center. This problem is documented for resolution but is there a preventative step out there?

SEP deployment using Altiris Integration Component

Comments

I noticed the threads on the

SEPIC Comments

Re

The SEPIC works well but why

Would you like to reply?

Links

Technical Support

Symantec.com

Store

Community Stats