Endpoint Protection

How I can create and export Package with Maintain existing client features for updating clients by MS SCCM (not Remote Push from SEPM)?

This setting only applies when you're using the Auto-Upgrade option in the SEPM.

If you want clients to keep the same feature set for an upgrade via SCCM, when you export the package, just make sure you use the same 'Client Install Settings' and 'Client Install Feature Set' that you have used previously.

You can create and export an install package that will maintain the present settings/configuration and logs.

Under the Admin icon on the left of your screen, and selecting Install Packages, you select Client Install Settings.

At the bottom of the next screen, you will see a radio button under 'Upgrade settings' that gives the option to 'Maintan all loggs, policies, and client-server communication settings'.

 

Hello johnsnnl,

At the bottom of the next screen, you will see a radio button under 'Upgrade settings' that gives the option to 'Maintan all loggs, policies, and client-server communication settings'. - this will save features?

Hi AndreyP There's no other way than what Brian said. You need to auto upgrade from sepm, otherwise you need to export exact sep client features set from manager to install using any other way.

Again, you just need to use the same settings you've used in the past and export a package with them. SCCM will not change the package and these settings will be maintained assuming you use what you did in the past.

to put it in simpler terms, if you know which clients uses which feature set then you can simply create a new install feature set with the required fetures selected. 

 

in general clients OS go with full on protection while the servers are installed with basic protection without PTP and NTP.

 

Hello all,
thanks for answers.

The customer has many servers with different SEP features. And it would be convenient to make one package and not remember which server has which the features.

Export the package as an MSI 

and modify the setAID.ini file

<subhead style="box-sizing: border-box;">Setaid.ini</subhead>

Setaid.ini is primarily used in installations exported from the Symantec Endpoint Protection Manager. Setaid.ini values always take precedence. The installation uses the following settings:

In section <computercode style="box-sizing: border-box; font-family: monospace !important; font-size: 1em !important;">[CUSTOM_SMC_CONFIG]</computercode>:

• <computercode style="box-sizing: border-box; font-family: monospace !important; font-size: 1em !important;">KeepPreviousSetting=val</computercode>

  • <computercode style="box-sizing: border-box; font-family: monospace !important; font-size: 1em !important;">0</computercode> = Do not keep previous settings

  • <computercode style="box-sizing: border-box; font-family: monospace !important; font-size: 1em !important;">1</computercode> = Keep previous settings 
     
    Note: This setting pertains to maintain existing settings in the package creation tab

• in SCCM cmd it will be msiexec.exe /i "SEP.msi" /qn, 

please try in lab before pushing out to large number of clients.

 

https://support.symantec.com/en_US/article.TECH102668.html

 

Ooooo, perfectly. Great thanks.