Endpoint Protection

 View Only
  • 1.  Upgrade to MR4

    Posted Aug 20, 2009 07:42 AM

    I did an upgrade from MR3 to MR4 of about 150 clients. Most of them are fine however about 30 don't seem to be taking the upgrade. Is there a way to auto-upgrade a single client as opposed to a group? I can see exactly which ones have not upgraded yet but I cannot create a special group for those if there is an easier way! Please Help!



  • 2.  RE: Upgrade to MR4

    Posted Aug 20, 2009 08:03 AM
    Policies and Settings are always applied to groups not to individual clients
    and clients will be in a group
    We need to create a groups for those, no other go..
    or else
    create a new package and push it out to clients.
    its just 30 ,the time it would take will be 15 mins :)


  • 3.  RE: Upgrade to MR4

    Posted Aug 20, 2009 08:30 AM
    Try to find out cause of failure...

    May be some virus  is present on these pc's which is causing installation rollback.





     


  • 4.  RE: Upgrade to MR4
    Best Answer

    Posted Aug 24, 2009 10:11 AM
    Hi,

           Please check the following link. You mentioned that you know the machines that have not been upgraded therefore I would request you to note them on an a notepad one by one and save this file. Create a new Installation package and then using the Migration and Deployment Wizard push this package to the desired clients using the list created in the notepad file.

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007111409432848.

    Follow these steps to deploy Symantec Endpoint Protection (SEP) to the client computers on your network:
    In the Symantec Endpoint Protection Manager Console, under Clients, and View Clients ensure that you have a main Server group in addition to My Company and Default Group.
    Create a main Server Group (if necessary) under the My Company group by following these steps:
    Right-click My Company.
    Click Add Group.
    Enter a Group Name for your main group.
    Click OK.

    Note: If you plan to deploy SEP client to computers running a server operating system, it is suggested that two client groups be created under your main Server Group. One for servers where an Installation Package is deployed that does not include Network Threat Protection (NTP) or Proactive Threat Protection (PTP) and another for clients that uses an Installation Package that may include these features.


    Go to Admin> Install Packages and follow these steps to create a custom Install Package:
    Select Client Install Settings, and then click Add Client Install Settings.
    Enter a Name and optional Description for the custom settings and adjust Client Installation Settings as desired.
    Click OK.
    Select Client Install Feature Sets, and then click Add Client Install Feature Sets.
    Enter a Name and optional Description for the custom Feature Set.
    Disable the AntiVirus Email Protection option (suggested).  If this Installation package is for deployment to servers, disable the Truscan Proactive Threat Scan and Network Threat Protection options.
    Click OK.


    Select Client Install Packages.
    Click Export Client Install Package
    In the "Export folder" field click the Browse button and browse to (or create) a folder to export the installation package to.
    In the "Installation Settings and Features" section, pick the customized installation settings and features you created in Step 3 from the drop-down lists.
    In the "Policy Settings" section, select the group(s) that you want clients to be added to and ensure that the "Add clients automatically to selected groups" option is enabled.
    Adjust other settings as wanted and click OK. A progress indicator appears as your Installation package is created and exported to the designated folder.


    After they are created and saved, you are ready to deploy the installation package to your clients. Follow these steps:
    Launch the Migration and Deployment Wizard by going to Start > All Programs > Symantec Endpoint Protection Manager > Migration and Deployment Wizard.
    Select Next at the "Welcome" screen,
    Ensure Deploy the client is enabled and click Next.
    Enable the "Select an existing client install package to deploy" option, and then click Finish.
    In the "Push Deployment Wizard", click the Browse button.
    In the "Browse for Folder" dialog box, navigate to and open the folder that you exported your installation package to in the previous Step 6.  Select the subfolder.
    Click OK, and then click Next. 
    In the "Select one or more computers...  screen", either:
    Click the Add or Import Computer button and select the computers based upon "IP Address" or "Host name." You may also use a text file list that is populated with either Host names or IP Addresses. Format for the name/ip list txt file: 1 value per line, if 2 values are provided on the same line the second value is ignored, values may be a host name or IP address, IP addresses must follow IPv4 addressing.

    Or

    Drill down into the "Microsoft Windows Network" to Add your workstations to the "Computers to deploy to" pane.

    After your workstations are added to the "Computers to deploy" pane, click Finish. A progress indicator appears as the Symantec Endpoint Protection software is deployed.
    The Symantec Endpoint Protection software now installs automatically to the workstations.