Endpoint Protection

I don't believe there is a way to do that.  Unless you push out the installer with root privileges through, say, Apple Remote Desktop, the installer must be authenticated with an admin password.

sandra

hi sandra,

 

that's a great article you referenced.  however, it states "As the install package requires authentication, use of sudo and an Administrator password is required to use the above Terminal command."

 

how do we do create an actual silent installer of a managed client? 

 

~vick

I had another thought: when you burned the CD for your user, did you extract the zip before you burned it?  Unzipping the file created by the SEPM must be done by the Archive Utility on the Mac client; otherwise, file permissions are not preserved.

sandra

You should probably create a new thread for your question.

The client gets definitions from LiveUpdate, so that has nothing to do with being managed.  What does it say under the Symantec Quickmenu?

sandra

I exported the Mac package, and selected "Default Group" as the membership.  I copied the package to a CD and gave it to the user.  The user ran the install and selected "managed" from the option page.   The Symantec client successfully installed and was able to download virus updates.  However, I still do not see the machine in the "Default Group" of my clients, in the Symantec Endpoint Console.

You're welcome! :)

sandra

Thanks Sandra for the input

I have some instructions for bypassing the managed vs. unmanaged stage--let me verify whether or not this is something that I can share.

There's also a section in this document about making silent managed installs:

------
Silent managed installs:

The Symantec Endpoint Protection for Macintosh client can be installed silently after an export of the package from a Symantec Endpoint Protection Manager. This option prevents the regular Installer UI from appearing to the User and the SEP for Mac client will install according to the settings made by the Administrator. The client will install as either Managed or Unmanaged without intervention by the User and the User will not be able to change these settings.

To modify the exported install package to run silent without any user interaction or alerts:
- Export the package from the Symantec Endpoint Protection Manager using the steps above
- Copy the package to a Mac OS X system
- Open the Terminal in /Applications/Utilities
- In the Terminal, enter the following command: /usr/sbin/installer ­pkg <pathToPackage> -target <MountPoint>

<pathToPackage> is the path to locate the copy of the Symantec Endpoint Protection client package that was exported and copied to the Macintosh.
<MountPoint> is the path to where the converted package file will be written to.

------

sandra

Thanks for the information but end users still have the choice of going unmanaged.  How do we grey that out or skip that step?  7 out of 10 people are just going to click next but there are a few that will say something like, I do not want IT touching MY computer....
Is there a file that the install creates that we can use an apple script to do the install and push a simple file to the machine to make it managed wether or not they choose managed or unmanaged?
Thanks for the reply.

Good Article

thanks...............

nice article

Prachand's instructions above make a managed installer.  Just be sure to click a box to indicate group membership when creating the package.

If you wanted it to be unmanaged, you could just install from the SEP_MAC folder on the install media.

sandra

That is correct.  You must either make the file available for download on your network, install it locally, or use a utility like Apple Remote Desktop to deploy.

If you double-click on the .zip file, inside is an .mpkg file.  Double clicking on that will install the product.

sandra

Is there a way to create a Managed only installer. We currently have RU6 installed. We would like to have a managed only version so eithe the user or 3rd party  software can install the "managed version".

Yep, got that far - thanks.  Guessing the created zip has to be used to install on MAC clients as I don't see a deploy for MAC option.  I'll find out soon enough.

Thanks again

 
You can download  RU6 from the file connect site.
 
Please go to the following  site :https://fileconnect.symantec.com/
 
Enter the Serial No of the product and download the product.
 
Title: 'Installing Symantec Endpoint Protection 11.0.6 (RU6) for the first time'
Document ID: 2010041310191048
> Web URL: http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2010041310191048?Open&seg=ent
Title: 'Migrating to Symantec Endpoint Protection 11.0 RU6'
Document ID: 2010041310404248
> Web URL: http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2010041310404248?Open&seg=ent

Assuming this means the MAC Install Package is available.  Where can I find it to download\purchase for download.

Thanks