Endpoint Protection

 View Only
  • 1.  Windows Local Administrator account to push SEP.

    Posted Feb 19, 2013 03:34 PM

    I have noticed that SEP will NOT install unless the local administrator account is enabled. Here is the problem, we do NOT want to enabled the local account "Administrator" it is a security issue. We want to rename our Administrator account and NOT have to have SEP depend on "Administrator" for installation.

    So, let's say, I want to rename the Administrator account "chuck" How can I get SEP to deploy with the "Administrator" account named "chuck" or does it HAVE to be installed using "Administrator"

     

    Windows 2003/2008 Server, 32/64 Bit and Windows 7 64 Bit and Windows 32 Bit XP Systems.



  • 2.  RE: Windows Local Administrator account to push SEP.

    Posted Feb 19, 2013 03:42 PM

    Judging by the language in the document, I take it to mean the Administrator account needs to be enabled:

    Preparing Windows operating systems for remote deployment

    Article:HOWTO80805  |  Created: 2012-10-24  |  Updated: 2013-01-30  |  Article URL http://www.symantec.com/docs/HOWTO80805

     

    Ensure that the Administrator account does not have a blank password.

    Enable the built-in administrator account and assign a password to the account.

    BUT...there is this line:

    • Verify that the account has administrator privileges

     

    So, I would think you could rename it and push as long as it has admin privs...



  • 3.  RE: Windows Local Administrator account to push SEP.

    Posted Feb 19, 2013 03:44 PM

    Ad administrator account has been added, will it work with this account? It is NOT the primary local administrator, it was added and assigned local admin rights on the PC's.



  • 4.  RE: Windows Local Administrator account to push SEP.
    Best Answer

    Posted Feb 19, 2013 03:44 PM

    it should. Similar setup on this end.



  • 5.  RE: Windows Local Administrator account to push SEP.

    Posted Feb 19, 2013 03:54 PM

    According to: http://www.symantec.com/docs/TECH163112

    To install the client software, you need administrative rights to the computer or to the Windows domain. If you do not want to provide users with administrative rights to their computers, use Remote Push Installation to remotely install the client software. Remote Push Installation requires you to have local administrative rights to the computers.

    ...does not need necesarily to be build-in local admin.