Endpoint Protection

Hello All,

How can I ensure that newly joined WIndows Server and workstation can get the Antivirus client installed and updated ?

Hi,

How can I make sure that the newly joined domain computer gets SEP client ?

Without any Clone Image SEP client not install any Desktop or server automatic.

You can use Clone image on Desktop Installation,but you can folow steps when you will br create clone image.

How to prepare a Symantec Endpoint Protection 12.1 client for cloning

http://www.symantec.com/business/support/index?page=content&id=HOWTO54706

So SEPM server will not query the AD on regular basis to automatically include and install the SEP client ?

No,

In that case you can use GPO

Check this thread

How to used GPO to install SEP clients? Any other ways with cheap or free method

https://www-secure.symantec.com/connect/forums/how-used-gpo-install-sep-clients-any-other-ways-cheap-or-free-method

sepm will query the AD if you have synched OU, however it will not push SEP client to the machines if they are not installed.

You need to find them using unmanaged detector and install it. Or use the image with SEP client and make sure you have followed these steps before applyingthe image on new systems

http://www.symantec.com/business/support/index?page=content&id=HOWTO54706

unmanaged detector and install it --> What is that ?

AFAIK my laptop has been configured as that, but I cannot understand how it works.

You can Search System where is sep client are not installed or Unmanged SEP client are available.

Unmanaged Detector in SEP 12.1

https://www-secure.symantec.com/connect/articles/unmanaged-detector-sep-121

Check this fourms

https://www-secure.symantec.com/connect/forums/symantec-endpoint-protection-121-and-find-unmanaged-computers

What does it mean to set a client as an Unmanaged Detector?
http://www.symantec.com/docs/TECH105722
 

Find Unmanaged Clients on a remote network location using the Unmanaged Detector
http://www.symantec.com/docs/TECH96234
 

Setting notifications when using the "Unmanaged Detector" feature in the SEPM
http://www.symantec.com/docs/TECH104897
 

and also does this article still applies to SEP v12.1 RU1: 

Best Practices: When to use the "Find Unmanaged Computers" or "Unmanaged Detector" features in Symantec Endpoint Protection 11.0

Is there any instructions to make sure that SEPM query the AD ?

Hello,

Atleast yes, for the Unmanaged Detector.

What does it mean to set a client as an Unmanaged Detector?

http://www.symantec.com/docs/TECH105722

In SEP 12.1, "Find Unmanaged computers" Feature has been removed. With SEP 12.1, we decided to merge the old clientremote tool and Find Unmanaged Computers into one.  The new version is called the Client Deployment Wizard.

Check this Thread:

https://www-secure.symantec.com/connect/forums/where-did-find-unmanaged-computers-go-121

https://www-secure.symantec.com/connect/forums/find-unmanaged-computers-3

Hope that helps!!

Many thanks, I guess the pre-approved cehcklist is the best due diligence to follow to make sure that every new server built and workstation got the Anti Virus.

GPO is one way. Another way I find easiest, but depends on how your deployment solution (if you have one) works...

We have it set up as part of the MDT task sequences, so the last thing it does before joining the PC to the domain and rebooting is install SEP. Works a treat. Similar options wills be available in most deployment solutions I'd imagine

Andrew,

May I know what is MDT ? Microsoft Desktop Tollkit ?

Microsoft Deployment Toolkit. Been around a few years now, free bit of software from Microsoft for an image based deployment solution. Sort of a cut down version of SCCM for deployment only

http://technet.microsoft.com/en-us/solutionaccelerators/dd407791.aspx

Cool, many thanks for the assistance and explanation !