I have found these MST files to be useful for SEP installs by Group Policy on various configurations where specific SEP features are desired. They are all tested and known to work with versions of SEP 11.0 from MR2 MP1 and MR4 MP2. To create your own, see https://www-secure.symantec.com/connect/articles/creating-transform-mst-file-control-installation-symantec-endpoint-protection.