Endpoint Protection

Hi All

So how is everyone going with RU6?  All good?

Upgrades ok?   and new deployments as well i guess....

Would be great to hear and roll up into this thread for everyones reference also. :)

I've upgraded to RU6 on both our extranets, smooth as silk

Upgrading the company early next week and I expect it to go off without a hitch.

I'd love to hear how this goes when you upgrade the clients next week.  In the past when I have added an install package to a group to have the clients upgrade from an earlier version, I've had some mixed results.  The ones I am concerned about are even when the install in supposed to be silent, I have seen some of the MSI cycles where it shows the progress and just keeps looping over and over and a client reinstall on the endpoint is necessary at that point.  I almost finished deploying RU5 to about 8000 PC's, and I would be very fearful of having this issue even on only 5-10% of my clients which could be 400-800 workstations.

I've "tested" the feature to add an Install Package on 5 groups, all 10 or fewer PCs. I did not hear back from the users with complaints nor did out helpdesk. Also, the install looked to be successful per SEPM and spot checking a few PCs.

For RU6, because I badly want to use the app and device control policy, which was broke for me in RU5, I plan to use this feature almost exclusively. My only concern is for our locations overseas. Our SEPMs are in the U.S. and I don't want to bury the lines. I may go the route of SCCM for overseas.

I guess my question would be would our GUPs act as the distro point? I always thought when using this feature, it was strictly the SEPMs that pushed out the package and the GUPs were only for LUs.

I have seen the looping issue before on clients, all when I upgraded from SAV to SEP. For some reason, SAV did not uninstall completely and SEP kept trying to remove it and install itself. I've also seen many more weird things like that as well. Cleanwipe is my best friend Don't like to use it but when users can't work, it's a big problem...so ideally my last resort becomes my first

I believe you are correct about that.  I think GUP's only do definition updates. 

My MSI cycles were when going from SEP 11 MR 42 to SEP 11 RU 5 via adding an install package to a group.  It too was in a group that never had more than 10 clients.  I would create a group just for the upgrade and move clients into it to get the upgrade, and for ones that were successful, would move them back to their permanent location again when complete.

To my knowledge, I've never had an issue with a SEP to SEP upgrade, at least no complaints that I got. It was always SAV to SEP. I should note that the issues came about when it was something other than pushing from SEPM.

SCCM, scripted, etc., I would see issues. If pushed from SEPM, it was either a success or failure. And when it was a failure, it just didn't install and quit. My guess is the scripted install had something wrong in the script and in SCCM, maybe the package was bad, not really sure as I didn't set them up.

After pushing RU6 to clients, they get the popup to restart so the App and Device control policy can take affect....not good

I finally got round to upgrading this today, was easy and painless.

Followed the KB, so backed up the DB, stopped the manager service then ran the backup, all went through without issues.

The new web console is great, no more fighting with java issues on our workstations :)

upgraded and good. C

upgraded and good.