Video Screencast Help
Symantec Secure Login will be live on Connect starting February 25. Get the details here.

Deploy SEP Client By Active Directory GPO

Created: 27 Mar 2013 • Updated: 09 May 2013 | 7 comments
Language Translations
W007's picture
+6 6 Votes
Login to vote

Steps to Deploy SEP Client By Active Directory GPO

Create MSI package in SEPM console

  1. Login SEPM console ->Admin ->Install Package.
  2. Click on Client Install Settings ->Add Client Installation Settings.


       3.    Add  Client Installation Settings->Give Name as per below screen shot.


    4. Export Client Package ->Unchecked “Create a Single EXE file for  this package.”


5.Export the MSI package.



7. Copy MSI package NETLogon folder.

How to create Group Policy in AD

  1. Start ->Run type gpmc.msc.
  2. Open Group Policy management Console.
  3. Click Domain Name -> right Click ->Create a GPO in this Domain.


4. Open New GPO dialog Box ->Give the GPO name (Software Installation)->Ok.


 5. Select GPO Edit ->Open New Dialog box ->Computer Configuration ->Policies ->Software Settings -> Software Installation.


 6. Software Installation ->New ->Package



 7. Open Shared NETLogon Location ->Select SEP package ->open.


 8. Select Deployment Method (Assigned)


 9. Affter Assigned package showing below Image.


10. Assgin the package respected OU.

11. Restart system.

12 After Sep Client Showing Respected SEPM Group.

Comments 7 CommentsJump to latest comment

raju123's picture

Thanks for sharing artical :) +1

Login to vote
nwranich's picture

Nice article.

Login to vote
viktor777's picture

We have SEP12.1
I created "Client Install Settings" for silent installation - only the status bar is visible.
Settings are confirmed in the "Setup.ini" file - /quiet /norestart
Generated the "Client Install Package" for 64 bit.
As a result "SEP64.msi" file was created.
Deploying SEP64.msi via GPO causes the error "source files missing".
Running SEP64.msi manually on a client from a shared folder ends up with the "Symantec Welcome" windows - action required.

But if I run the following line "msiexec.exe /qb /norestart /i Srp64.msi" from the command line, installs SEP client on the test computer successfully.

Something is missing - running SEP64.msi by itself is not working.

Contacted Symantec tech support - they are not supporting SEP deployment via GPO.

I need to deploy SEP via GPO.

Any ideas are greatly appreciated.


Login to vote
pete_4u2002's picture

does 32 bit instal successfully through GPO?

Login to vote
Rash_M's picture

wow nice article !!!!!!!!!+1

Login to vote
viktor777's picture

I have 64 bit stations only.
So didn't create 32 bit.

Login to vote