Video Screencast Help
Symantec Secure Login will be live on Connect starting February 25. Get the details here.

Keeping Windows Defender Enabled when Deploying and Installing Symantec Endpoint Protection Client package.

Created: 03 Oct 2011 • Updated: 17 May 2016 | 2 comments
Language Translations
Mithun Sanghavi's picture
+2 2 Votes
Login to vote

Here are few steps you can follow and try:

 1) Create a .msi package.


2) Edit the setup.ini file within the package and add that option either at the end of the CmdLine option under the [Startup] section to look like:


3) Push this package to one client  to check if the same works:

SEP 11.x - Migration and Deployment Wizard:

SEP 12.1 - Add a Client Wizard:


Symantec Endpoint Protection installation software uses Windows Installer (msi) 3.1 packages for installation and deployment. If you use the command line to deploy a package, you can customize the installation. You can use the standard Windows Installer parameters and the Symantec-specific features and properties.

To use the Windows Installer, elevated privileges are required. If you try the installation without elevated privileges, the installation may fail without notice. For the most up-to-date list of Symantec installation commands and parameters, see the Symantec Support Knowledge Base article, MSI command line reference for Symantec Endpoint Protection

Another way is by checking the above Document.

The last line of the above document gives you an example of the command line:

setup /s /v"/l*v log.txt /qn RUNLIVEUPDATE=0 REBOOT=REALLYSUPPRESS"

you can try changing the same to:


Comments 2 CommentsJump to latest comment

abhishek8866's picture


Thank you for this amazing discription

I tried this on my environment and it works great.

Login to vote