Question/Issue:
You want to know the recommended steps for deployment after installing the Symantec Endpoint Protection Manager.


Solution:
Follow these steps to deploy Symantec Endpoint Protection (SEP) to the client computers on your network:

1. In the Symantec Endpoint Protection Manager Console, under Clients, and View Clients ensure that you have a main Server group in addition to My Company and Default Group.
2. Create a main Server Group (if necessary) under the My Company group by following these steps:
   1. Right-click My Company.
   2. Click Add Group.
   3. Enter a Group Name for your main group.
   4. Click OK.
      -
      Note: If you plan to deploy SEP client to computers running a server operating system, it is suggested that two client groups be created under your main Server Group. One should use an Installation Package that does not include Network Threat Protection (NTP) or Proactive Threat Protection (PTP) for servers and another that uses an Installation Package for the clients that may include these features.
      
      
3. Go to Admin> Install Packages and follow these steps to create a custom Install Package:
   1. Select Client Install Settings, and then click Add Client Install Settings.
   2. Enter a Name and optional Description for the custom settings and adjust Client Installation Settings as desired.
   3. Click OK.
   4. Select Client Install Feature Sets, and then click Add Client Install Feature Sets.
   5. Enter a Name and optional Description for the custom Feature Set.
   6. Disable the AntiVirus Email Protection option (suggested). If this Installation package is for deployment to servers, disable the Truscan Proactive Threat Scan and Network Threat Protection options.
   7. Click OK.
      
      
4. Select Client Install Packages.
5. Click Export Client Install Package
6. In the "Export folder" field click the Browse button and browse to (or create) a folder to export the installation package to.
7. In the "Installation Settings and Features" section, pick the customized installation settings and features you created in Step 3 from the drop-down lists.
8. In the "Policy Settings" section, select the group(s) that you want clients to be added to and ensure that the "Add clients automatically to selected groups" option is enabled.
9. Adjust other settings as wanted and click OK. A progress indicator appears as your Installation package is created and exported to the designated folder.
   

1. Launch the Migration and Deployment Wizard by going to Start > All Programs > Symantec Endpoint Protection Manager > Migration and Deployment Wizard.
2. Select Next at the "Welcome" screen,
3. Ensure Deploy the client is enabled and click Next.
4. Enable the "Select an existing client install package to deploy", and then click Finish.
5. In the "Push Deployment Wizard", click the Browse button.
6. In the "Browse for Folder" dialog box, navigate to and open the folder that you exported your installation package to in the previous Step 6. Select the subfolder.
7. Click OK, and then click Next.
8. In the "Select one or more computers... screen", either:
   1. Drill down into the "Microsoft Windows Network" to Add your workstations to the "Computers to deploy to" pane.
      
      Or
      
   2. Click the Add or Import Computer button and select the computers based upon "IP Address" or "Host name." (You may also use a text file list that is populated with either Host names or IP Addresses)
      
      
9. After your workstations are added to the "Computers to deploy" pane, click Finish. A progress indicator appears as the Symantec Endpoint Protection software is deployed.
10. The Symantec Endpoint Protection software now installs automatically to the workstations.

References:
This document is available in the following languages:

• Brazilian-Portuguese: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/br_docid/20080820084510935
• French: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/fr_docid/20080820084759935
• German: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/de_docid/20080820084835935
• Italian: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/it_docid/20080820084908935
• Polish: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/pl_docid/20080820084954935
• Hungarian: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/hu_docid/20080820085027935
• Russian: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/ru_docid/20080820085059935
• Czech: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/cz_docid/20080820085133935
• Spanish: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/es_docid/20080820085313935

Document ID: 2007111409432848
Last Modified: 10/15/2008
Date Created: 11/14/2007
Operating System(s): Windows 2000 Professional, Windows 2000 Server/Advanced Server, Windows XP Professional Edition, Windows Server 2003 Web/Standard/Enterprise/Datacenter Edition, Windows XP Professional x64 Edition, Windows Server 2003 x64 Edition
Product(s): Endpoint Protection 11
Release(s): Endpoint Protection 11 [All Releases], Endpoint Protection 11.0