Symantec endpoint protection agent deployment via SCCM 2012

Hello to all the members. I am trying to deploy SEP agent . I have exported the msi package . But Whenever I try to deploy it its is not being deployed. In the DP's it shows that the content could not be copied to the endpoints. Please tell me how can I
fix this ?
Regards

Hi,
I am Chetan Savade from Symantec Technical Support Team.
Symantec recommends that SMS/SCCM packages launch Setup.exe rather than the MSI directly. This method ensures that the MSI engine can update to the minimum recommended version and also enables installer logging. Use the custom package creation feature in
SMS/SCCM to create custom packages instead of the package wizard feature.
Refer this article:
http://www.symantec.com/docs/HOWTO55425
Best Regards,
Chetan

Similar Messages

Lync 2013 x64 silent client deployment via SCCM 2012 SP1

Greetings everyone!
I ran into a problem with Lync 2013 x64 silent deployment.
I need to provide every workstation with Lync 2013 client, so i decided to use deployment via SCCM 2012 sp1.
I created 2 msp files with OCT, one based on x86 Office 2013 Proplus, and other based on x64 Office 2013 Proplus.
Added them as applications to sccm software library.
Deployment of Lync 2013 x86 application was a success with over than 80% compliance.
But all Lync 2013 x64 automatic installations finish with different errors.
I created special device collection for workstations with office 2010 x64 and 2013 x64, because i can't install other architecture products once it has x64 product installed.
My membership query-rules for this collection:
Office 2013 x64
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_INSTALLED_SOFTWARE on SMS_G_System_INSTALLED_SOFTWARE.ResourceId
= SMS_R_System.ResourceId where UPPER(SMS_G_System_INSTALLED_SOFTWARE.SoftwareCode) = "{90150000-0011-0000-1000-0000000FF1CE}"
Office 2010 x64
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_INSTALLED_SOFTWARE on SMS_G_System_INSTALLED_SOFTWARE.ResourceId
= SMS_R_System.ResourceId where UPPER(SMS_G_System_INSTALLED_SOFTWARE.SoftwareCode) = "{90140000-0011-0000-1000-0000000FF1CE}"
My application deployment type points to setup.exe in office 2013 x64 installation folder, where i created msp file in updates folder via OCT and edited config.xml file in proplus.ww folder.
So my installation program looks like this setup.exe /adminfile updates\1lync.msp /config proplus.ww\config.xml
The same configuration works with Lync 2013 x86 deployment, except other setup folders.
When i try running installation program setup.exe with /adminfile and /config parameters locally, it installs successfully without errors or warnings.
I'm trying to find out problem source, does anyone have ideas what I am doing wrong?
Also i'm trying to reduce office 2013 installation folder size, what subfolders are necessary for Office 2013 proplus installation (still installing only lync with common files and tools)? Because now 3.5 GB package is quite hard to distribute to sccm secondary
sites with deployment point.
Thanks in advance.

Hi,
Here are some tips and tricks for your reference.
Tips and Tricks: Deploying Lync 2013 client using SCCM 2012 | Lync 2013 Client Customization for SCCM 2012 Deployment Package
http://zahirshahblog.com/2014/01/08/tips-and-tricks-deploying-lync-2013-client-using-sccm-2012-lync-2013-client-customization-for-sccm-2012-deployment-package/
Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Lync 2013 client deployment via SCCM 2012 forcing restart

All,
I am attempting to deploy the Lync 2013 x86 client via SCCM 2012 to 158 machines running the Office 2010 suite. My package runs, and the installs complete but they are forcing a restart after the install even though I have gone in to everything that I can
think of to tell the install not to force a restart. I am a newb in the ways of SCCM so I have been self teaching, and I may have missed something.
I have gone into the config.xml and changed the value SETUP_REBOOT to NEVER.
In the program properties I have RUN set as HIDDEN, and AFTER RUNNING set to NO ACTION REQUIRED.
Is there something that I am missing to stop the users machine from restarting after the install completes?

Great, unfortunately it will be because files (usually shared DLLs) are in use as Office is opened, despite it being an older version.
Agree it's not optimal, I usually just tell clients that they will need to reboot, or that it will push out overnight (when I schedule it) and their computer will restart, so make sure they save everything.
If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer"
Georg Thomas | Lync MVP
Blog www.lynced.com.au | Twitter
@georgathomas
Lync Edge Port Check (Beta)

IE11 prereqs deploy via SCCM 2012

Hi,
To deploy IE 11 on Windows 7, apparently you need to install 9 prereqs (see http://www.itninja.com/blog/view/how-to-package-internet-explorer-11-x64-for-windows-7-x64):
These prereqs are: KB2834140
KB2670838 KB2639308 KB2533623 KB2731771
KB2729094 KB2786081 KB2888049 KB2882822
I don't find the prereqs in red within sccm 2012. Did check the classifications (checked them all in software update point) and did a full sync.
Please advise howto find/deploy them (I hoped to do this via windows updates and not via seperate packages).
J.
Jan Hoedt

Hi,
I just checked the first Patch:
http://support.microsoft.com/kb/2670838
And there you can find the section: How to obtain this update.
Is there is Windows Update not noted, you can't receive this Patch through Windows Updates. Consider to deploy the Patch as prerequisite as an application. Here you can find an example of installing hotfixes as prerequisite for the App-V client:
http://scug.be/sccm/category/detection-methods/
Detection method is VBScript. Ar you want to create a Detection method with Powershell, refer to this blog post:
https://sccmfaq.wordpress.com/2013/03/19/sccm-2012-application-detection-with-powershell-and-code-signing/
Hope this helps.
www.sccmfaq.ch

Endpoint Protection Role fails after SCCM 2012 SP1 upgrade 0x8004ff84

We have been in the process upgrading our SCCM RTM to SP1 in order to get to R2 in the end. After upgrading the PRimary Site server to SP1 it seems the Endpoint protection update did not succeed. I removed the role and after that tried it to install again,
results below.
EPSetup.log
I<09/26/14 14:24:25> Installing the SMSEP
<09/26/14 14:24:25> Passed OS version check.
<09/26/14 14:24:25> File E:\BO\Microsoft Configuration Manager\Client\SCEPInstall.exe version is 4.4.304.0.
<09/26/14 14:24:25> EP version 2.2.903.0 is already installed.
<09/26/14 14:24:25> EP 2.2.903.0 is installed, version is lower than expected installer version 4.4.304.0.
<09/26/14 14:24:25> Invoking process "E:\BO\Microsoft Configuration Manager\Client\SCEPInstall.exe" /s /q /noreplace /policy "E:\BO\Microsoft Configuration Manager\Client\EP_DefaultPolicy.xml"
<09/26/14 14:24:25> CreateProcess: E:\BO\Microsoft Configuration Manager, "E:\BO\Microsoft Configuration Manager\Client\SCEPInstall.exe" /s /q /noreplace /policy "E:\BO\Microsoft Configuration Manager\Client\EP_DefaultPolicy.xml"
<09/26/14 14:25:00> CreateProcess: -2147156092
<09/26/14 14:25:01> SCEPInstall.exe returns 0x8004ff84
<09/26/14 14:25:01> SMSEP could not be installed. The return code was -2147156092
<09/26/14 14:25:02> ~RoleSetup().
When I manually try to run the SCEPInstall.exe setup asks for certain msi files it cannot find. Anyone seen this behaviour before? I'm not able to find information on this one.

It seems the uninstallation of the current SCEP client fails. It uses the new SCEPinstall.exe version to do the uninstall which fails. I copied the old version from another computer and used that to do the uninstall manually scepinstall.exe /u
It asks a few times for a location to find the msi files used to do the uninstallation. You have to point at a temporary map created at the drive root location. The Uninstall succeeds.
Now the Endpoint Protection role can be added again and will also succeed.

Error code 1603 While deploying symantec Endpoint protection through MDT Task sequence as Install a single Application

Hi ,
Am getting Error code 1603 (fatal error during installation) while deploying the SEP through MDT task sequence . am not getting such issue regularly but some time am getting and need to be fixed.
Shailendra
Shailendra Dev

Hi,
I am Chetan Savade from Symantec Technical Support Team.
Logs can provide more detail info, as said earlier by MrBrooks provide SEP_Inst.log from the affected machine.
Adding Windows defender related articles if they can help you:
Keeping Windows Defender Enabled when Deploying and Installing Symantec Endpoint Protection Client package.
http://www.symantec.com/docs/TECH168501
Windows Defender startup type registry value is Manual instead of Disabled after installing Symantec Endpoint Protection
http://www.symantec.com/docs/TECH206793
How to prepare a Symantec Endpoint Protection 12.1.x client for cloning
http://www.symantec.com/docs/HOWTO54706
Best Regards,
Chetan

Trying to deploy a VB Script via sccm 2012 R2

Hello All
This is my first attempt at deploying a script via SCCM 2012 R2 and I seem to be stuck. Essentially what this script does is map a printer. The script on its own works fine. Meaning it works when I double click it and also running it from the command
line. Its when I try to use in sccm things go down hill. I have tried the following from the command line in the package properties.
\\my-sccm-server\Sources\Applications\VBSripts\cscript.exe Impact.vbs
\\my-sccm-server\Sources\Applications\VBSripts\Impact.vbs
Phil Balderos

looks good :)
You can check execmgr.log on the client to monitor the install as it is running.
Thank Richk,
Still no luck. Here is the output from execmgr.log. Its saying that is completed but nothing ever happens. I am about ready to throw in the towel on this one but I just feel like that is should work because its such a simple script.
Set WshNetwork = CreateObject("WScript.Network")
WshNetwork.AddWindowsPrinterConnection "\\srv-gtt-papercut\followme"
WshNetwork.SetDefaultPrinter "\\srv-gtt-papercut\followme"
Phil Balderos
Is the script running as an Admin ,if so then you likely set the printer up for the local system user account and not anyone else.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

Deploy Lync 2013 Via SCCM 2012

Dear,
I wants to deploy Microsoft Lync 2013 via SCCM 2012, I have created a new deployment package based on MSI file to install Microsoft Lync 2013 for company machines, during the installation package will install for clients computer perfectly but instead of
install automatically to users, every time message coming user should do it manually for example user should accept the terms of the agreement, kindly I need a way to solve this issue, I need Lync 2013 automatically install without users doing anything, please
see attached snapshot.

Make sure that you are using the right command line using your newly created MSP
ex: setup.exe /adminfile "Lync_Updated.msp"
As proposed, update your DP so that your MSP gets distributed.
You can also follow this guide if you're still experiencing difficulties.
http://systemcentersynergy.com/lync-2013-silent-or-unattended-install/
Benoit Lecours | Blog: System Center Dudes

Trouble Deploying Windows updates via SCCM 2012

Hello
I'm testing Windows updates via SCCM 2012 - I have successfully deployed updates to 4 test PC's.
I then added another 15 Test PC's into the same group - Not one of them receive updates (they're all within the same Domain and even in the same room)
I reviewed "UpdatesDeployment.log -
1. I highlighted some points that stood out to me
2. I have the Maintenance window set to 24hours for this test
From the Server side and Clients side - What are the best .logs to look at.
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT START Event   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Suspend activity in presentation mode is selected   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
At least one user has elected to suspend non-business hours activity when in presentation mode. Checking for presentation mode.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Proceeding to non-business hours activites as presentation mode is off.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Auto install during non-business hours is disabled or never set, selecting only scheduled updates.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
A user-defined service window(non-business hours) is available. We will attempt to install any scheduled updates.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Attempting to install 0 updates   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
No actionable updates for install task. No attempt required.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Updates could not be installed at this time. Waiting for the next maintenance window.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)

Hi,
You could also check Windowsupdate.log on the client.
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

How to deploy MS Visio & MS Project via SCCM 2012

Dear friend,
Please let me know the How to deploy MS Visio & MS Project via SCCM 2012, step by step
Thanks

You need to utilize Office Customize Tooltik to build config.xml, then distribute the config.xml with setup file. Below are some documents talking about this.
http://blogs.msdn.com/b/visio/archive/2011/02/04/more-on-visio-2010-volume-deployment.aspx
http://blogs.technet.com/b/odsupport/archive/2010/12/03/volume-license-editions-of-visio-2010-install-premium-edition-by-default.aspx
Juke Chou
TechNet Community Support

App-V 5.0 SP2 user applications published via SCCM 2012 to VDI workstations with roaming only

Hi,
The environment consists of App-V 5.0 SP2 (KB2956985) user based applications published via SCCM 2012 to Windows 7 VDI snapshotted workstations that are reset at user logoff.
When a user logs on the SCCM 2012 client initiates App-V client package publishing. After a couple of minutes after logon the shortcuts appear and the user can launch their applications.
The issue is that at logoff, even with roaming enabled, the publishing information disappears. This causes the next logon process for that user to repeat, the applications are not available until the SCCM client has completed it's publishing cycle.
Roaming profiles are implemented. %APPDATA% is redirected to a UNC path. The following registry key is set
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AppV\Client\Integration\PreserveUserIntegrationsOnLogin=1
U-EV, global publishing of applications, and AppLocker rules are not an option. Also, I have read this already - http://technet.microsoft.com/en-us/library/dn659478.aspx#BKMK_PE
I do not want to wait for the SCCM client to kick in prior to the user applications being available. What do I need to roam or run to create a seamless transition for the user between sessions?
Eddie.

Hi Tywin (bad username considering the last GoT Episode ;))
If you ask Microsoft, they always recommend using SCCM for deploying App-V packages and reuse your current SCCM infrastructure if that is already in place. Problem is, as you now experience, is that there is some big caveats both in regards to publishing
time and to roaming of settings.
As Nické states I would suggest looking into the Full Infrastructure Model for App-V 5.x, which gives you much better performance in what I call "from no apps" to "being able to click the shortcut" - the add and publishing phase. If you don't have the time/budget/whatever
to start looking into that, you could look into some community tools like App-V Scheduler which is developed specific by Citrix guys to ease the publishing and management in a Citrix world.
Microsoft have a great article about Performance Guidelines, which you have read, but it mostly presumes you work with Full Infrastructure. Have you looked into Steve Thomas' session from TechEd NA? It talks about "implementation trends".
Senior Consultant at Atea Denmark - http://Atea.dk Atea Technical Evangelist for App-V NoLightPeople - http://NoLightPeople.com Access Director - http://www.nolightpeople.com/index.aspx#accessdirector

Symantec Endpoint Protection Manager Installer Information Script Error

hi
I can't install SEP Manager 14.1 in our windows 2012 R2 server I got an error during the installation.While was installing symantec endpoint production 14.01 , I am getting an error right at the end of the install. I understand that . I should do it with
vbs running for symantec installing. however I dont know How can I do it ?,
"Symantec Endpoint Protection Manager Installer Information - Error 1722. There is a problem with this Windows Installer package. A
program run as part of the setup did not finish as expected. Contact your support personnel or package vendor. Action RunFIPSScript, location: c:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\bin\, command: C:\Windows\SysWOW64\...\FIPSMode.vbs"
-install"

Hi,
I am Chetan Savade from Symantec Technical Support Team.
I think you are talking about SEP 12.1 product. There is not any product by code 14.1.
With reference to mentioned issue there is a Public Kb available. Refer the following KB:
Symantec Endpoint Protection "Error 1722: There is a problem with this Windows Installer package..."
http://www.symantec.com/docs/TECH103131
Possible Solution as per KB: To fix the problem, run the Windows Installer CleanUp utility and then remove Symantec AntiVirus manually. Then, install Symantec Endpoint Protection again.
To learn how to obtain and use the Windows Installer CleanUp utility, read the
Microsoft article Description of the Windows Installer CleanUp Utility.
Click the entry for Symantec AntiVirus or Symantec Client Security, and then click Remove.
If more than one entry appears, remove the earliest program version first. After you remove all entries for Symantec AntiVirus and Symantec Client Security, remove Symantec AntiVirus manually.
To find directions for your version of Symantec AntiVirus, read
Manual uninstallation documents for Symantec Client Security products.
Symantec connect forum link to raise SEP related issue: https://www-secure.symantec.com/connect/security/forums/endpoint-protection-antivirus
Best Regards,
Chetan

I can't print with symantec endpoint protection

I can't print with symantec endpoint protection.
I have to disable the firewall, or reboot my windows 7 computer for the print job to print. Any ideas what is blocking the printing process and how do I allow so I can print using my HP P2033dn that is connected via ethernet to my time capsule. Thanks

In the meanwhile I detected the problem. I made a new user account in windows and now it works correctly. So it isn't a photoshop problem but probably a register error. I have to find out furtherThanks for your reaction.
[ excessive quoting removed by admin ]

Installing Symantec endpoint Protection installtion failed

Hi ,
I have Symantec endpoint protection and have setup.exe. I have create a package and created a program as
setup.exe /s /v"/qn RUNLIVEUPDATE=0 REBOOT=REALLYSUPPRESS" but unfortunately installation fails as part of Task sequence.
just wondering if I am using some wrong command line arguments...pls. share any pointers. pls. find the screen shot attach from smstslog
Regards.

Hi,
I am Chetan Savade from Symantec Technical Support Team.
See if Windows defender is causing any issue.
Can change it to setup /s /v"/l*v log.txt /qn RUNLIVEUPDATE=0 REBOOT=REALLYSUPPRESS DISABLEDEFENDER=0"
Refer these articles:
Keeping Windows Defender Enabled when Deploying and Installing Symantec Endpoint Protection Client package.
http://www.symantec.com/docs/TECH168501
Using MSI Command Line Switches to install Symantec Endpoint Protection (SEP) 12.1 fails to install or fails to abide by switch parameters
http://www.symantec.com/docs/TECH177946
MSI command line reference for Symantec Endpoint Protection
http://www.symantec.com/docs/TECH102668

Silent Install for SQL 2008 admin tools, to be pushed out via SCCM 2012

Hi I would like to know if you have any information on Silent App installs for MS SOL fetchers only? I really need to know what MSI to use in my Application and any switched i can incorporate for deployment though SCCM 2012.
Thanks,
Manny

Hi,
do you want to install SQL 2008 admin tools? and what tools do you want to install? and what is your application? And do you want to deploy the installation script via SSCM? Please be more clear.

Symantec endpoint protection agent deployment via SCCM 2012

Similar Messages

Maybe you are looking for