Endpoint Protection

 View Only
  • 1.  Pull Mode-SEP14 MP2 client upgrades not working from SEPM

    Posted Oct 04, 2017 11:35 PM

    Hello,

    I am running into a deployment issue using SEP14 MP2.  We are trying to update clients with new versions of SEP 14 MP2 and they keep failing with a message of "the client computer is ready to accept the package" and nothing happens.  When running SYMDIAG it states the UAC LocalAccountTokenFilterPolicy must is set to 0 and may prevent a remote installation.  We do CIS hardening and we cannot change that registry key due to security concerns.  Any ideas on how to use pull mode (cannot do push mode since network is too huge and bandwidth is limited) to get clients updated to new SEP versions?  Anyone know how pull mode installs new versions on the clients?  SEP 14 Admin guide only really explains push mode in detail, which we cannot use.  SEP support has not been much help either.  Any ideas this forum may have would be much appreciated.

    Matt



  • 2.  RE: Pull Mode-SEP14 MP2 client upgrades not working from SEPM

    Posted Oct 05, 2017 06:41 AM

    I don't see how the mode makes a difference. The client will check in and get the command that an upgrade package is there, but, it won't download right away. It goes through a check on its end to make sure it can accept it. When it checks in again, it will "accept" it, but, again, may not download it. It can check in once more before it downloads it and does the upgrade.

    Did this work prior to 14 MP2?

    If you install the package manually on the client, does it work?



  • 3.  RE: Pull Mode-SEP14 MP2 client upgrades not working from SEPM

    Posted Oct 05, 2017 11:28 AM

    In theory, it should update since the agent does the actions of local form with privileges of System, therefore, I continue to review a computer lowering UAC to the minimum or realizing a local installation in some equipment.