Endpoint Protection

Hello guys , this forum post is in contiutation of my last query where SEP client was appearing as disabled in SEPM Dashboard becuase of the following componets were malfunctioning.

1. AutoProtect

2. Sonar

3. Download Insight

Now upon investigation and from your personal experiences it was discovered that if we apply intelligent updater on any affected machine renndering the above behavior of component malfunction this resolves this problem most of the time. 

However for larger number of clients say > 200 we can apply it manually on each machine. 

 

Is it possible that we can push it either via SEPM remote push or SCCM on a bunch of machines so that the intelligent updater can be pushed. What is the best and most optimum approach to use in this scenerio.

 

Regards

yes any exe can be pushed via SCCM, we dont entirely depend on SEPM for all the aspects, whenever possible we use SCCM to do the task,

pushing IU will be just like another exe using SCCM, best past is you can use SCCM reporting feauture to quickly find ythe failed ones.

Thanks for the reply rafeeq . Have you ever presently or in the past tried to Push IU on clients via the SCCM ? does it work well ? I mean the clients are able to succesfully install the intelligent update .

So SCCM reporting will tell whether the package was pushed and succesfully installed or not.

 

Regards 

Yes, it all works fine via sccm just use the /q switch to keep it silent and yes sccm will report on it like anything else.

Hi guys is there any way I can convert the IU.exe to an msi package becuase the SCCM guys need to know about the exact argument that they should use while pushing the package.  Thanks 

An msi isn't provided. Here's the command line switches for them to use:

http://www.symantec.com/docs/TECH102351

Just one thing while pushing the file do we have to specify the installation directory of SEP or not where it will be installed . Or we just need to specify in the switches IU.exe /q and it will automatically detect where SEP is installed and take care of stuff. 

Thanks 

You can specify a directory where you would like the IU file copied to but once the install starts it will automatically do what it needs to do.

Just the /q switch nothing else...it would work just fine..if u r using sccm 2007 use the inbuilt report status of the specic advertisement..

Ok thanks guys I will test it and let you know about the outcome. Thanks

You're welcome.

As everyone said there ins't any .MSI file available. As you have identified after pushing intelligent updater file clients are showing normal status however I would suggest to monitor it on 4-5 machines and then roll out across the network.