Endpoint Protection

Problem: You want to know how to install Symantec Endpoint Protection on Windows Server 2008 R2 Server Core.

Server Core is a minimal installation for Windows Server 2008 and later which provides a small attack surface, a minimal set of services and a command line instead of GUI. More information on Server Core option can be found here: http://technet.microsoft.com/en-us/library/cc753802%28WS.10%29.aspx

Environment: 

Windows Server 2008 OR Windows Server 2008 R2

Solution: 

Symantec Endpoint Protection Manager v. 11.x OR Symantec Endpoint Protection Manager v. 12.1

It is not possible to install Symantec Endpoint Protection Manager (SEPM) on Server Core. Server Core is a installation mode of Windows Server which contains a minimal set of services to reduce an attack surface.

Server core is missing a GUI and Internet Explorer. One of installation requirements for SEPM is Internet Explorer and since it cannot be installed on Server Core, neither SEPM can.

Symantec Endpoint Protection Client v.11.x

To install unmanaged Symantec Endpoint Protection client software on Windows Server 2008 Server Core (all other clients)

1 Insert the product disc in the drive.
2 Open a command prompt.
3 Change directories to the root directory of the product disc.
4 Type Setup.exe, and then press Enter
5 Follow the steps of the installation wizard to complete the installation

To install unmanaged Symantec Endpoint Protection 64-bit client software on 64-bit Windows Server 2008 Server Core

1 Insert the product disc into the drive.
2 Change directories to the root directory of the product disc.
3 Type cd SEPWIN64\X64, and then press Enter.
4 Type vcredist_x64.exe, and press Enter. (to install Visual C++ Redistributable. Without it, you will not see the installation wizard.)
5 Change directories to the root directory of the product disc.
6 Type Setup.exe, and press Enter
7 Follow the steps of the installation wizard to complete the installation.

To install Managed Symantec Endpoint Protection client software on Windows Server 2008 Server Core

Windows 2008 Core installation works like any other Windows 2008 client to deploy SEP as managed. It is recommended to use 'Find unmanaged computers' to deploy a managed client from SEPM.

When installing the Symantec Endpoint Protection client via the Symantec Endpoint Protection Manager to Windows 2008 Core installation, we will require the following prerequisites:  

1. Disable the Windows firewall, or enable communication on TCP ports 139 and 445 and UDP ports 137 and 138.
2. The C$ and Admin$ shares on the target clients are accessible from the Manager system. The Server service is installed by default to provide administrative share support for management tools but could be disabled after installation.
3. There is an password-protected Administrator account common to all target systems that are being simultaneously deployed to.

Since Windows 2008 Core is a command line only interface, doesn’t have IE, or support for user applications, UAC is not available in Server Core. So no additional step have to be done about this.

To access SEP interface just type SymCorpUI.exe located in the SEP installation folder (by default: "c:\Program Files\Symantec\Symantec Endpoint Protection")

For Custom Packages, you may have to create and export the package on a Windows GUI by following the steps provided in the Article:

http://www.symantec.com/docs/TECH102817

Later, you can bring the Exported Custom package on CD/DVD drive and follow the same steps provided below.

Symantec Endpoint Protection Client v.12.1

To install unmanaged Symantec Endpoint Protection client software on Windows Server 2008 Server Core (all other clients)

Execute setup.exe from the corresponding installation folder:

• For 32 bit systems use SEP folder of the Symantec CD
• For 64 bit systems use SEPx64 folder of the Symantec CD

Follow the on-screen prompts to complete the installation of the unmanaged client.

Note: To open SEP UI, browse to the folder C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.xxx.xxx.xxx\Bin and execute the file SymCorpUI.exe

To install Managed Symantec Endpoint Protection client software on Windows Server 2008 Server Core

Windows 2008 Core installation works like any other Windows 2008 client to deploy SEP as managed. It is recommended to use 'Find unmanaged computers' to deploy a managed client from SEPM.

When installing the Symantec Endpoint Protection client via the Symantec Endpoint Protection Manager to Windows 2008 Core installation, we will require the following prerequisites:  

1. Disable the Windows firewall, or enable communication on TCP ports 139 and 445 and UDP ports 137 and 138.
2. The C$ and Admin$ shares on the target clients are accessible from the Manager system. The Server service is installed by default to provide administrative share support for management tools but could be disabled after installation.
3. There is an password-protected Administrator account common to all target systems that are being simultaneously deployed to.

Since Windows 2008 Core is a command line only interface, doesn’t have IE, or support for user applications, UAC is not available in Server Core. So no additional step have to be done about this.

To access SEP interface just type SymCorpUI.exe located in the SEP installation folder (by default: "c:\Program Files\Symantec\Symantec Endpoint Protection")

For Custom Packages, you may have to create and export the package on a Windows GUI by following the steps provided in the Article:

http://www.symantec.com/docs/TECH165801

Later, you can bring the Exported Custom package on CD/DVD drive and follow the same steps provided above.

To Uninstall Symantec Endpoint Protection, follow the Article below:

http://www.symantec.com/docs/HOWTO26763

Hope this helps ALL!!