Preparing Windows and Mac computers for remote deployment
Before you deploy
Symantec Endpoint Protection
from Symantec Endpoint Protection Manager
, you must take steps to prepare the computers to ensure a successful remote installation. These steps pertain only to remote installation. You can reverse these changes afterward, but you must apply them again to perform another remote installation.You cannot deploy the
Symantec Endpoint Protection
client to Linux computers remotely from Symantec Endpoint Protection Manager
.Task | Details |
---|---|
Have administrative rights to your client computers | If the client computer is part of an Active Directory domain, you should use domain administrator account credentials for a remote push installation. Otherwise, have the administrator credentials available for each computer to which you deploy. |
Modify firewall settings | Modify firewall settings to allow communication between Symantec Endpoint Protection components. |
Uninstall existing third-party security software | Uninstall any third-party security software currently in use. For Windows computers, Symantec Endpoint Protection version 12.1 RU1 MP1 and later includes a tool to help automatically uninstall select third-party security software. You must separately uninstall any security software that this tool does not uninstall. Some programs may have special uninstallation routines, or may need to have a self-protection component disabled. See the documentation for the third-party software. You configure this tool before you deploy, and the uninstallation occurs before Symantec Endpoint Protection installs. |
Uninstall Symantec Endpoint Protection clients that do not uninstall normally | As of 14, you can uninstall an existing installation of the Symantec Endpoint Protection client for Windows. You should only use this option if the existing Symantec Endpoint Protection installation does not uninstall normally. You should not use this option as part of a standard deployment.
You configure this tool before you deploy, and the uninstallation occurs before Symantec Endpoint Protection installs. |
Uninstall unsupported or consumer Symantec security software | Uninstall any unsupported Symantec security software, such as Symantec AntiVirus or Symantec Client Security. Migration directly from these products is not supported. You must also uninstall any consumer-branded Symantec security products, such as Norton Internet Security. See the documentation for your Symantec software for information about uninstallation. |
Operating system | Tasks |
---|---|
Prepare Windows Vista, Windows 7, or Windows Server 2008 / 2008 R2 computers | Windows User Account Control blocks local administrative accounts from remotely accessing remote administrative shares such as C$ and Admin$. You do not need to fully disable User Account Control on the client computers during the remote deployment if you disable the registry key LocalAccountTokenFilterPolicy. To disable UAC remote restrictions, see:
Perform the following tasks:
Consult the operating system's documentation for guidance on how to successfully complete these tasks. |
Prepare Windows 8 / 8.1 or later, or Windows Server 2012 / 2012 R2 or later computers
| Before you deploy, perform the following tasks:
|
Operating system | Tasks |
---|---|
Prepare the Mac computers on any supported operating system | Before you deploy, perform the following tasks on the Mac computers:
|