Endpoint Protection

Problem

There is a need to apply new SEP client package via auto-upgrade. However, the architecture of group management is largely based on subgroups within principal groups.

Error

Although policies descend onto all subgroups when policy inheritance is activated, that is not the case of auto-upgrade. With a large number of subgroups, applying auto-upgrade becomes a cumbersome option.

Environment

Symantec Endpoint Protection Manager

All Windows platforms

Cause

Only policies are applicable when policy inheritance is activated. Auto-upgrade does not take part of policies and thus are not heritable by subgroups.

Solution

A solution is to use group update option. To apply it, the following steps must be followed:

1) Go to Admin tab

2) Select Installation Packages from options available on the botton left of the Manager

3) On the upper-left, select Client Installation Packages

4) In Tasks, click on an option with two arrows icon to update groups with an installation package

5) The Update Assistant will open. Now, select an already prepared package and then tick groups onto which the package should descend upon. Confirm your selection.

6) This should create an installation package in installation packages tab of each group and subgroup available in Clients page.