Endpoint Protection

I come from a Nod32 background.  We are just now finishing migrating to Symantec Endpoint.    In Nod32, from the Remote Admin server, I can do just about anything I want to a PC I manage by using the scheduler and launching external tasks through %compsec%.

I need to figure out how to do this with Symantec Endpoint Protection.

I have a bunch of laptops.  They are not a part of my active directory or VPN.  They all run independent , throughout North America.    The only control I have is through the Antivirus software.

  I see where I can reboot a PC under run commands, but how do I run my own commands?   I need to modify two registry settings on my machines.  I typically do this by launching %compec% /c reg add.

Thanks!

 You'll need Symantec Network Access Control for that.
https://www-secure.symantec.com/connect/articles/what-all-can-you-do-symantec-network-access-control

1. Log in to the Symantec Endpoint Protection Manager.

2. Click the Clients tab on the right side.

3. In the View Clients area, right click on your site. By default, this is listed as 'My Company'.

4. From the context menu, select 'Run Command on Group'.

5. From the context sub-menu, select 'What command you need to run.


This shows how to run a command on the Group

In the same way if you right click on the client you option to run command on the cleint