Upgrading Windows client software automatically
To automatically upgrade the client on all of the Windows devices, you use the System policy. Windows devices receive a delta upgrade package if the install cache is still present on the device. This package is smaller than the full installation package. Otherwise, the device receives the full installation package.
You can upgrade the client using multiple ways. The method you should use depends on your environment and goals. For example, you might have a large number of clients or groups, or devices that run different versions of the client.
Some methods can take up to 30 minutes. Therefore, you may want to upgrade client software when most users are not logged on to their devices.
When to use
When not to use
Client Upgrade (Recommended for smaller environments)
Export a client installation package (Recommended for larger environments)
Client upgrade best practices
Use the following best practices for automatic upgrade:
- Test the upgrade process before you attempt to upgrade a large number of devices in your production network. If you do not have a test network, you can create a test group within your production network. For this kind of test, you add a few non-critical clients to the test group and then upgrade them by policy.
- To reduce bandwidth during peak hours, schedule the upgrade for after hours.
- The upgrade can only install the Application Hardening feature on client devices when the following conditions are met:
- You must enableMaintain existing client features when updatingwhen you runUpgrade Clients with Package. This setting is enabled by default.
- The device cannot have the Symantec Data Center Security agent installed.
- The Antimalware (Virus and Spyware Protection) feature is currently installed and selected for upgrade.
Step 1: Configure the client upgrade settings
- In the cloud console, go toPolicies>Default System Policy.
- UnderClient Upgrade Settings, select the toggle next toAllow Client Upgradeto enable it.
- SelectShow Advancedto further configure upgrade settings.
- To apply the policy to the device group that you want to upgrade, selectApply.
Step 2: Configure the LiveUpdate server
You must have LiveUpdate configured to use either a Symantec LiveUpdate server or one that you install.
Step 3: Restart the device after upgrade
The device must be restarted after the upgrade. By default, the clients restart after installation. You can configure the restart options in the Device Integrity policy to control how the clients in a group restart after the client upgrade.
Step 4: Verify that the client software installed correctly
After the upgrade completes, you can check the version to confirm a successful upgrade in one of the following ways:
- In the cloud console, go toDevices > Device Groups, select the appropriate group from the list. SelectShow Filters, and then filter the list by version.
- On theHomepage >Hometab, go toIT Operations>Client Version Distributionwidget.
- On the Windows client interface, go toHelp > About.