Endpoint Protection

Hi i want to make auto upgrade on some 12 clients (Windows7 in domain) and i think i have a problem.

- server is installed as 12, then updated to 14. All seems to be OK, i can manage all clients with 12 and 14

- I prepared new OU for 14 clients with the same policies like for old 12, policies are created from very begining

- now i just move few clients to new OU, and prepared new upgrade package,

When i applied that package i see in the console (after double click on client) that package is accepted and ready to installation (see screen)... but that is from few days, update does not starts :( (package is set to install without user interaction).

When i make it with option 'Install a client' using the same package and remote push option, client is installed without problems. When i make it wit upgrade clients there is no any question from Upgrade Groups Wizard about user with admin rights on en clients... is it OK?

Any ideas?

Upgrading to SEP 14 what you need to know
https://www.symantec.com/connect/blogs/upgrading-sep-14-what-you-need-know

Are the users rebooting their machines? As a reboot is needed to upgrade to SEP 14 from 12. If they are putting the machines in sleep or hibernate mode this will not allow them to upgrade. 

Hi i want to make auto upgrade on some 12 clients (Windows7 in domain) and i think i have a problem.

- server is installed as 12, then updated to 14. All seems to be OK, i can manage all clients with 12 and 14

- I prepared new OU for 14 clients with the same policies like for old 12, policies are created from very begining

- now i just move few clients to new OU, and prepared new upgrade package,

When i applied that package i see in the console (after double click on client) that package is accepted and ready to installation (see screen)... but that is from few days, update does not starts :( (package is set to install without user interaction).

When i make it with option 'Install a client' using the same package and remote push option, client is installed without problems. When i make it wit upgrade clients there is no any question from Upgrade Groups Wizard about user with admin rights on en clients... is it OK?

Any ideas?

sorry for double post, i don't know how to delete that one :D

Yes, PC's are rebooted completely.

Do the users have admin rights on the machines? as an auto push from the SEPM to do it automatically will usually use the system admin to complete. It may be that the users don't have the required rights to complete the upgrade

Users do not have administration rights. So if i good understand upgrade can be only made when users are administrators? Is there no way to attach to this task service user with admin rights from domaine like it is when I push installation to new clients? It would be quite strange and completely unuseful :(

Users themselves don't need admin rights but the account that you use to push from SEPM will need admin rights.

When i make push it is working, there is a pop-up where i can put admin user for PC's.

Question is: what about upgrade?

Not sure what you mean. If you're pushing from SEPM and the account you're using has the necessary rights than nothing else is needed. The only way end users would need admin rights is if they're actually running them upgrade themselves.

Think he said when he does an auto upgrade and keep all settings the same it works, but when he sets the auto upgrade to user interaction prompt those one's aren't upgrading.

so.. i have SEPM from 12 to 14 updated, now there is few hundred devices with client 12 i different OUs...

I've prepared new OUs with new policies for clients which i want to updated to 14 (they all have 12 already)

now: I moved for example 100 PCs to new OU and want to perform upgrade on them, auto upgrade, on all of them with few clicks - how should i make it?

anyone?

I would just use the auto upgrade process from the SEPM Install Packages section and do it as a silent install with either a no forced reboot and get the users to reboot when convinent or a scheduled reboot with the ability for the users to pospone the reboot if needed. 

have a look into these articles.  though they say 12.1 it is also applicable to 14.0

Upgrading client software with AutoUpgrade

Upgrade Endpoint Protection 12.1 clients using AutoUpgrade

Hi, works ONLY when user has Administrator rights :( . Is there any log to check what is going on on Clients?

A deployment report will give you the basic information (Reports > Computer Status > Deployment Report)

Other than that a full status export (Monitors > Computer Status) amd then filtered in excel.