/build/static/layout/Breadcrumb_cap_w.png

How to Deploy the Symantec Endpoint Protection Client 12.1 from the KACE 1000

Hello All,

Even though Symantec does not support a command line install of the Symantec Endpoint Protection 12.1 client, using the default Symantec installation files, there is a way around that limitation if you want to deploy the SEP 12.1.1101.401 (ru1 mp1) client with KACE 1000. I did this with my KACE 1000 and it worked very well.

There is one limitation: you can use KACE 1000 to deploy either a 32-bit OR a 64-bit installation package at any one time, but cannot deploy both concurrently. This limitation is due to limitations with both the Symantec product and the Dell KACE product. Symantec's limitation is that a Windows 32-bit SEP install file cannot be installed on a Windows 64-bit OS. The Windows 64-bit OS must have a Windows 64-bit SEP install file.  Dell KACE’s limitation is that the software inventory is unable to distinguish between a 32-bit and a 64-bit version of the exact same software title and version.  Even so, there is a way around the KACE limitation that I will explain in the last step.

Here is the process for a Windows OS:

  1. From the Symantec Endpoint Protection Manager (SEPM), use the Client Deployment Wizard to create an installation package that you save to a network location that can be accessed by the KACE 1000. Create that package as a single ".exe" file.  For instructions how to do that, consult the Symantec Administrator Manual or see my posted Deployment Tip "How to create an .exe file in the Symantec Endpoint Protection Manager for use for KACE 1000 Deployment". 
    1. In my environment, I created an install package in which the “client install settings” was set to “Show Progress Bar”, because I wanted the Symantec installation routine to be visible at its beginning on my KACE client computers while it was installing.  If you want a totally silent install for KACE deployment, you need to define that during the process of creating this install file in the SEPM. That is done in “Admin/Install Packages/Client Install Settings” in the SEPM, prior to creating your .exe installation package in the SEPM Client Deployment Wizard.
    2. Be aware the Symantec Client Deployment Wizard creates one 32-bit install file and
      one 64-bit install file.  Test the file you create here by installing it manually on a client computer to make sure your “silent” install, if you chose that, works to be silent.  Be aware that the size of each .exe file will be approximately 45MB.
    3. c.    Once this file works the way you want when manually run, it is very simple to have KACE deploy it. (Okay… it is “simple” if you know how to set up managed installations J, so I have for your benefit detailed instructions below and they should be followed in the order given for best results.)

2. If you do not already have this version of Symantec client (12.1.1101.401) in the KACE software inventory, choose the 32-bit or 64-bit install file and manually install it on a client computer, by simply clicking on the setup.exe file so that it installs on the computer. After that completes logon to the KACE 1000 admin console and run an inventory on that client computer. This puts that program into the KACE software inventory.

3. Go to "Distribution/Managed Installations". From "Choose Action" click the drop down arrow select "Add New Item". Check the box "Also show software without an Associated File", type "Symantec Endpoint Protection" in the box next to "Filter". Click the drop down arrow to the right of "Software" and choose "Symantec Endpoint Protection (12.1.1101.401).  Click “Save” at the bottom of the page. We will return to this Managed installation setup later.

4. Go to “Inventory/Software”. In the search box type “Symantec Endpoint Protection” then click “Search”.  Click on the Symantec Endpoint Protection item found, after confirming the version column shows “12.1.1101.401”.  In the address bar of your browser is the path to this software item in KACE.  The path will look something like : http://kbox1000.yourcompany.com/adminui/software.php?ID=9871.  The important thing to note is the number at the end of this line.  In the case above “9871” is going to be the name of the folder created on the KACE client when the managed install is pushed out to that client.  Write down the number you see in your specific path.  You will need that number in defining the “Run Parameters” path, later in step 7 below.

5. Open the Managed installation you created in step 3. Click the “Browse” button next to “Upload & Associate New File”. Browse to either the 32-bit or 64-bit install file you created in step 1. 

6. For “Installation Command” choose “Configure Manually”.

7. For “Run Parameters” type in the path that will exist on the client computer after KACE pushes this install file out to it.  For Windows 7 type this, including the quotation marks: “C:\Programdata\Dell\KACE\downloads\9871\setup.exe”.  Change the 9871 to the number you wrote down at the end of step 4.  So, for example if your number is 376, the whole path you will type, including quotation marks will be “C:\Programdata\Dell\KACE\downloads\376\setup.exe”.  For Windows XP deployment the path will be “C:\Documents and Settings\all users\dell\kace\downloads\376\setup.exe”.  Disclaimer: these paths work only if you have not changed the default path on your client computers that a Managed Installation deploys to.

8. Check the box “Don’t Prepend msiexec.exe”

9. Choose a managed action that fits your needs. I used “Execute while user logged on”, and did not test any other Managed Action.

10. Make a choice in “Limit Deployment to Labels” that fits your needs.  I left the defaults for “Deploy Order” (10), “Max Attempts” (3), and “Deployment Window” “0” and “24”. I did not test any other choices.

11. If needed, choose and define Snooze, Custom Pre-Install Message and Custom Post-Install Message. I used a Post-Install User Message and did not test any other type.

12. Click “Save”. You will be prompted to allow the upload of the file to the KBOX. Be sure to allow that. Wait until the file is uploaded.

13. It will deploy according to the “Managed Action” selection.

14.  If you need a 32-bit and a 64-bit installation of the SEP 12.1.1101.401 client you can deploy them one at a time.  Go back to your Managed Installation and upload the 32-bit install file to the KBOX according to the direction in step 5 above. Also change the Deployment to machines section to be 32-bit OS clients. Click “Save”. That will run according to the parameters chosen in “Managed Action”. After that deploys, and now you find you need a 64-bit installation of the SEP client 12.1.1101.401, go back to your Managed installation and upload the 64-bit install file, and also change the Deployment to Machines section to be 64-bit clients, and click “Save”.  That also will deploy according to the parameter chosen in “Managed Action”.

--ITMonkeyBoy


Comments

  • I'm thinking this is going to work for me. Exported both 32 and 64 bit setups. Created the following batch file, zipped it all up and put in on the kace.

    @echo off
    IF EXIST "%PROGRAMFILES(X86)%" (GOTO 64BIT) ELSE (GOTO 32BIT)
    :64BIT
    setup64.exe
    :32BIT
    setup32.exe - bluecriminal 11 years ago
    • I use %PROCESSOR_ARCHITECTURE% environment variable instead. - Dunc the Punk 8 years ago
  • How did this go for you? - frasercarter 10 years ago
  • Got it to install the file in kace downloads, but it won't install the application. What am I missing? - kwlewis 8 years ago
    • Override default Installation
      C:\ProgramData\Dell\KACE\downloads\1234\setup.exe
      Don't Prepend msiexec.exe - pamkelly 8 years ago
    • How many times have you pushed the installation? Can you increase the Maximum Attempts? - pamkelly 8 years ago
    • What is your deployment window? If that is open, good. Also set Execution to Anytime. - pamkelly 8 years ago
  • I used default installation with no additional parameters. Using the setup.exe file. Works great now. Now I need to figure out how to disable windows defender on Win 8 machines. - kwlewis 8 years ago
This post is locked

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ