Endpoint Protection

 View Only
  • 1.  Group/Policies for SEPMs

    Posted Oct 14, 2009 01:50 PM

    Are there any special Group/Policy settings that are recommended for clients installed on the same machine as SEPM? I seem to remember seeing this at one time, but now cannot find anything online or in the CD documentation. Any help would be appreciated.



  • 2.  RE: Group/Policies for SEPMs

    Posted Oct 14, 2009 01:59 PM
    I don't think there is any special group policy setting for the SEP Cleint on the SEPM server.


  • 3.  RE: Group/Policies for SEPMs

    Posted Oct 14, 2009 02:00 PM
    Hi,

    There is no such special setting or policy that needs to be configured for the client installed on the SEPM machine.

    If you have installed SEPM on a server machine, make sure that the client installed on a Server OS should have only AV/AS components installed.

    Best,
    Aniket


  • 4.  RE: Group/Policies for SEPMs
    Best Answer

    Posted Oct 14, 2009 02:02 PM
     There is no special consideration for the client on SEPM...as it is treated as a normal client.
    However if this is a server ( or only server in your network ) then it is recommened to have it on a diffrent group as you might want to scan it at a different time.
    But nothing related to a sep on SEPM


  • 5.  RE: Group/Policies for SEPMs

    Posted Oct 14, 2009 02:03 PM
    Is this what you were looking for


    Title: 'Symantec Endpoint Protection: Adding Network Service to the Default Domain Controller Policy'
    Document ID: 2008010816442248
    > Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008010816442248?Open&seg=ent


  • 6.  RE: Group/Policies for SEPMs

    Posted Oct 14, 2009 02:50 PM
    SEPM is installed on 2 Win2K3 servers, and our default server install only installs AV/AS components, so we should be OK. I'm thinking what I had previously seen was likely related to what was mentioned about having a different group to facilitate an alternate scan time.

    Thanks to all.


  • 7.  RE: Group/Policies for SEPMs

    Posted Oct 16, 2009 05:53 PM
    I don't know if this issue is still around, but back when SEP first came out one of my SEPM servers had the SEP client installed on it.  The Live Update settings for the client seems to override the Live Update settings for the SEPM.  In my example I had clients checking our internal Live Update servers at a certain frequency and my SEPM checking at a different one.  When I looked at the logs the SEPM server was using the client's Live Update frequency.

    Just something to keep an eye on especially if your SEP client Live Update settings differ from what you want for SEPM Live Update settings.

    Jeff