Endpoint Protection

 View Only
  • 1.  SEP 14 - Host integrity, creating a script to run intelligent updater from shared folder

    Posted May 21, 2018 01:18 AM

    Hi All,

     

    Any sample to create as per topic?

     

    Below is my HI script, but seems like the HI script only run once....

     

     

     

    Thanks

     

     

     



  • 2.  RE: SEP 14 - Host integrity, creating a script to run intelligent updater from shared folder

    Trusted Advisor
    Posted May 21, 2018 03:21 AM

    Sorry but the screenshots you posted is too small for us to see/read. Could you please repost them?



  • 3.  RE: SEP 14 - Host integrity, creating a script to run intelligent updater from shared folder

    Posted May 21, 2018 08:41 AM

    you can try this and do the modification wrt to file path and name

    https://www.symantec.com/connect/forums/update-sylink-file-using-host-integrity-check

    intelligent updater takes these switches

     

    https://support.symantec.com/en_US/article.TECH102351.html



  • 4.  RE: SEP 14 - Host integrity, creating a script to run intelligent updater from shared folder

    Posted May 21, 2018 09:24 AM

    Sorry it was not that clear... let me change to another image

    \\sharepath\executeable.exe /q

     

    should work right? do SEP need any special permission?



  • 5.  RE: SEP 14 - Host integrity, creating a script to run intelligent updater from shared folder

    Posted May 21, 2018 09:43 AM

    it will execute with system account, no other permissions needed.

    check the About specifying the file location and execute command for remediation.

    under help files you need to specify the full path of msiexec and then the /q switch

    If you do not select to download an installation package, you can still specify a command for the client to execute. The client tries to install the missing application. You specify the command by giving the full path name of the executable file. FTP and UNC paths are supported. If you are familiar with variable representation, you can modify the command entry. Also, if you need to allow another application to be used to execute the program that is downloaded, you can modify the command entry. The following is an example of proper syntax:

    C:\program files\WinZIP\winzip.exe -a -s %1 -r c:\temp

     



  • 6.  RE: SEP 14 - Host integrity, creating a script to run intelligent updater from shared folder

    Posted May 21, 2018 12:12 PM

    Thanks rafeeq,

     

    Let's say I can see from HI logs it said execution succesfull, but cant see the SEP client got updated

     

    Could it be permission issue?



  • 7.  RE: SEP 14 - Host integrity, creating a script to run intelligent updater from shared folder

    Posted Jun 14, 2018 03:13 PM

    When HI try to take the Intelligent Updater in a shared folder, what user need permission to access the folder ?