Endpoint Protection

 View Only
  • 1.  Manual Update failing ... missing "incoming" folder

    Posted Sep 15, 2009 09:44 AM
    I am having to update unmanaged SEP 11 clients using the JDB files.  However, I am missing the following folder:

    \\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\inbox\.

    I recollect that there is a registry key that I can adjust ... and then after rebooting the folders will appear and will allow  me to update. 

    I cannot find this information after much searching.

    Please help ... thanks .... Greg


  • 2.  RE: Manual Update failing ... missing "incoming" folder

    Posted Sep 15, 2009 09:54 AM
    "Enable third party content updates"
    in the LiveUpdate Settings Policy
     


  • 3.  RE: Manual Update failing ... missing "incoming" folder

    Posted Sep 15, 2009 10:16 AM

    the goal is typically to disable the ability of client users to manually perform LiveUpdate. Managed clients are managed with Symantec Endpoint Protection Manager policies.

    When you are finished with this procedure, the following directory appears on the group's client computers that do not run Windows Vista:

    \\Documents and Settings\All Users\Application Data\Symantec\ Symantec Endpoint Protection\inbox\

    The following directory appears on the group's client computers that do run Windows Vista:

    \\Program Data\Symantec\Symantec Endpoint Protection\inbox\

    To enable third-party content distribution to managed clients with a LiveUpdate Policy

    In the console, click Policies.

    Under View Policies, click LiveUpdate.

    In the LiveUpdate Policies pane, on the LiveUpdate Settings tab, under Tasks, click Add a LiveUpdate Setting Policy.

    In the LiveUpdate Policy window, in the Policy name and Description boxes, type a name and description.

    Under Third Party Management, check Enable third party content management.

    Uncheck all other LiveUpdate source options.

    Click OK.

    In the Assign Policy dialog box, click Yes.

    You can optionally cancel out of this procedure, and assign the policy at a later time.

    In the Assign LiveUpdate Policy dialog box, check one or more groups to which to assign this policy, and then click Assign.

    hope this helps..



  • 4.  RE: Manual Update failing ... missing "incoming" folder

    Posted Sep 15, 2009 10:46 AM
    unmanaged client.

    BTW, what I was looking for ... I finally found it on page 115 of the "Administration Guide for Symantec Endpoint Protection and Syamantec Network Access Controll" - thanks for your help !!

    .If you installed unmanaged clients from the installation CD, the clients do not
    trust and do not process LiveUpdate content or policy updates for security
    purposes. To enable these clients to process updates, you have to create the
    following registry key:
    HKLM\Software\Symantec\Symantec Endpoint Protection\SMC\TPMState
    Set the value to hexadecimal 80 so that the key looks like 0x00000080 (128)
    After you set this key, you must either restart the computer or execute the
    following commands from the \Symantec\Symantec Endpoint Protection\
    directory:
    smc.exe -stop
    smc.exe -start
    The inbox folder appears in the following location on the client computers that
    do not run Windows Vista:
    \\Documents and Settings\All Users\Application Data\Symantec\ Symantec
    Endpoint Protection\inbox\
    The inbox folder appears in the following location on the client computers that
    do run Windows Vista:
    \\Program Data\Symantec\Symantec Endpoint Protection\inbox\
    You can now use third-party distribution tools to copy content or policy updates
    to this directory. The Symantec client software then trusts and process the content.
    You get the content to distribute from a Symantec Endpoint Protection Manager
    almost the same way that you do for managed clients.
    However, copy index2.xml from the My Company group, instead of copying
    index2.dax from your managed client group directory. Copy the full.dax file as
    described for the managed client. You can then distribute these files. You can also
    drop .vdb and .jdb files in the client inbox for processing.
    Note: If you stage the update files on the computers, you must copy them to the
    inbox. The update files are not processed if you move them to the inbox.



  • 5.  RE: Manual Update failing ... missing "incoming" folder

    Posted Sep 15, 2009 11:01 AM
    we did not read it clear, its for unmanged clients :)
    anyways you found the resolutions , thats great.