Launch SEMP -> Enter Admin password
On the left hand side, Select Admin -> Then Servers
Select your server -> Click "Edit the Server Properties"
Click the Directory Services Tab -> Click Add
Fill in the IP and then enter the IP. Click ok. If it was successful, the box will disappear.
Next, click Admin -> Administrators (Just Click Administrators if your still in the Admin tab)
Click Add an Administrator
Fill in the information under the general tab. It is recommended that you make the username the same as the account in active directory.
Click the Authentication Tab -> Select Directory Authentication -> Select the server and enter the AD username. Click Test. If successful, everything is setup correctly.
Showing posts with label SEPM. Show all posts
Showing posts with label SEPM. Show all posts
Tuesday, September 18, 2012
Tuesday, August 28, 2012
Symantec Endpoint Protection Manager (SEPM) Find Unmanaged Computers Client Install Fails on Windows 7
Symantec's reason why it fails:
When you logon to the A machine as administrator the SEPM runs using the local sysytem account. In the Windows Server 2008 r2 if you try to deloy any SEP package using local system account from SEPM ,it will not have the access to Remote registry of the client and you will get "Access denied" which can be seen in the logs. Therefore running the SEPM using the Administrator Credentials for SEPM services manualy will give access to the remote registry of the client.
How to fix this:
Click Start -> Run -> Type services.msc -> Scroll down to Symantec Endpoint Protection Manager ->
Double click the service -> Click the Log-on tab - > Select This account fill out your information.
Click Ok and restart the service. This should now work on the machines it was failing on.
Source: Link Link
When you logon to the A machine as administrator the SEPM runs using the local sysytem account. In the Windows Server 2008 r2 if you try to deloy any SEP package using local system account from SEPM ,it will not have the access to Remote registry of the client and you will get "Access denied" which can be seen in the logs. Therefore running the SEPM using the Administrator Credentials for SEPM services manualy will give access to the remote registry of the client.
How to fix this:
Click Start -> Run -> Type services.msc -> Scroll down to Symantec Endpoint Protection Manager ->
Double click the service -> Click the Log-on tab - > Select This account fill out your information.
Click Ok and restart the service. This should now work on the machines it was failing on.
Source: Link Link
Thursday, August 2, 2012
Symantec Endpoint Protection Manager won't export install package
I was getting the error message "Management server is not yet ready".
Here is how I fixed it.
I reran the Management server configuration wizard. This time it asked for a database password.
Restarted the Symantec Endpoint Protection Manager and the Symantec Embedded Database services.
Logged back on and tried to export and it successfully exported.
SEPM Version: 11.0.7 MP2
Source: Link
Here is how I fixed it.
I reran the Management server configuration wizard. This time it asked for a database password.
Restarted the Symantec Endpoint Protection Manager and the Symantec Embedded Database services.
Logged back on and tried to export and it successfully exported.
SEPM Version: 11.0.7 MP2
Source: Link
Tuesday, January 18, 2011
Deploying Symantec Endpoint Protection 11
First off I am going to make some assumptions...
1. You already downloaded Symantec Endpoint Protection (SEP) from https://fileconnect.symantec.com
2. You have already installed Symantec Endpoint Protection Manager Console (SEP Manager)
Open SEP Manager and login with your account. Select Admin from the icons on the left. Click Install Packages located at the bottom of the second column on the left. Next, click "Client Install Settings". Right click in the window to the right and click "add". I am going to call my settings Custom SEP install. You can choose different types of installations. The choices are Interactive, Unattended and Silent. Interactive lets the user interact with it, unattended shows the user but doesn't allow them to give input, and silent is when it runs in the background with no user interaction. You will also have to choose if you want the computer to restart after the install or not. Another option is if you want to install it into the default location or a special one. The last setting is for upgrading. If you are deploying this to a client that already has SEP installed, you have to choose if you want it to maintain all logs, policies, and client-server communication settings.
Next select "Client Install Feature Sets". Right click in the window to the right and click "add".We are going to create the features that are installed. Pick a name and choose your features you want installed.
Next select "Client Install Packages", then select the version of SEP you are trying to install. Select "Export Client Install Package".
Click Browse and navigate to a folder that you want the deployment package to be stored. You will want to click the drop down box below "Pick the customized installation settings below:" and select the custom install settings you created. Do the same for "Select the features you wanted to use:".
The next step will be different for everyone. If you have multiple groups in side of SEP manager, then you might have to do this several times. You can have several packages or you can select the default package and move the client to the correct group once it shows up in SEP manager. Click ok and your package starts to be exported.
Click close and close SEP manager. Now open "Migration and Deployment Wizard". Click Next --> Deploy the Windows Client --> Next --> "Select an existing client install package to deploy" --> Click Browse --> Navigate to the folder you exported your package to and select the exe. Click finish. You will then have to choose which machines you want to push it too. Select the machines, select add, enter administrative credentials and hit finish. You will be able to watch the progress of each machine.
If you want Symantec's explanation here is a link to their page: Link
1. You already downloaded Symantec Endpoint Protection (SEP) from https://fileconnect.symantec.com
2. You have already installed Symantec Endpoint Protection Manager Console (SEP Manager)
Open SEP Manager and login with your account. Select Admin from the icons on the left. Click Install Packages located at the bottom of the second column on the left. Next, click "Client Install Settings". Right click in the window to the right and click "add". I am going to call my settings Custom SEP install. You can choose different types of installations. The choices are Interactive, Unattended and Silent. Interactive lets the user interact with it, unattended shows the user but doesn't allow them to give input, and silent is when it runs in the background with no user interaction. You will also have to choose if you want the computer to restart after the install or not. Another option is if you want to install it into the default location or a special one. The last setting is for upgrading. If you are deploying this to a client that already has SEP installed, you have to choose if you want it to maintain all logs, policies, and client-server communication settings.
Next select "Client Install Feature Sets". Right click in the window to the right and click "add".We are going to create the features that are installed. Pick a name and choose your features you want installed.
Next select "Client Install Packages", then select the version of SEP you are trying to install. Select "Export Client Install Package".
Click Browse and navigate to a folder that you want the deployment package to be stored. You will want to click the drop down box below "Pick the customized installation settings below:" and select the custom install settings you created. Do the same for "Select the features you wanted to use:".
The next step will be different for everyone. If you have multiple groups in side of SEP manager, then you might have to do this several times. You can have several packages or you can select the default package and move the client to the correct group once it shows up in SEP manager. Click ok and your package starts to be exported.
Click close and close SEP manager. Now open "Migration and Deployment Wizard". Click Next --> Deploy the Windows Client --> Next --> "Select an existing client install package to deploy" --> Click Browse --> Navigate to the folder you exported your package to and select the exe. Click finish. You will then have to choose which machines you want to push it too. Select the machines, select add, enter administrative credentials and hit finish. You will be able to watch the progress of each machine.
If you want Symantec's explanation here is a link to their page: Link
Subscribe to:
Posts (Atom)