Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Install SEP directly from the SEPM Client View

Created: 10 Aug 2011 | 4 comments
Bob in AC's picture
1 Agree
0 Disagree
+1 1 Vote
Login to vote

In a medium to large enterprise utilizing an Active Directory view you will be able to see 'unmanaged" computers.  Since SEPM does not support an auto-install process this would provide the admin an opportunity to select and install a SEP client without independantly utilizing the "Find unmanaged client" screen.  (This has already been determined.)

The following work flow would occur while in client AD view.

Unmanaged computers are found, right-click, "run command on clients" > select new option to "install sep client" the computers are auto-filled in "Find Unmanaged Computers", add in credentials, select OS versions (I don't know why this is necessary anymore), press [Start Installation].

Done.

Comments

Jeremy Dundon's picture
12
Aug
2011
1 Vote +1
Login to vote

If you are fully AD sync, why

If you are fully AD sync, why not use Software Install GPO to install software?

All computers get the software, no pushing (or finding or locating) necessary.

Bob in AC's picture
12
Aug
2011
0 Votes 0
Login to vote

Would you assume that all AD

Would you assume that all AD computers are either 100% 32 bit or 64 bit and Windows based.  We have a variety of appliances, MAC, ESX Servers and Linux boxes that are part of our AD structure.

I know much of this may be controlled by placement of the install GPO, but we are agnostic on the placement of 32/64 bit OS in AD structure.  Also I am adverse on re-designing our AD (and GPO) structure to fit the limitations of a software package.    If we were a small business this may be acceptible, however with an Forest with many childs and sub-domains this is not preferable.

I would more then likely have gone this route if there was a Universal Install agent or a installable shim that executes the proper version during the computer boot up.   We already do this for two applications on our network.

Thanks for your input, it is appreciated.

Jeremy Dundon's picture
12
Aug
2011
0 Votes 0
Login to vote

Yeah, in a perfect world GPO

Yeah, in a perfect world GPO would be all you need. :)

MSI and AD GPO do draw a distinction between 32 and 64bit packages, though you do need to go to the advanced options when assigning the package to utilize them.

 

 
Bob in AC's picture
12
Aug
2011
0 Votes 0
Login to vote

Windows 2003 GPO

Regardiing the 32/64 installations.  only the IA64 (aka Itanium) processors are supported in a Windows 2003 R2 environment.

Vista/Win7 are not supported.  Also I don't believe SEP does Itanium.  Could be wrong, since I don't have one for testing.