To manage computers with Symantec Endpoint Protection Manager, you must export a managed client installation package, and then install the files in the package onto client computers. You can export packages to deploy the client with Symantec Endpoint Protection Manager, or you can deploy them with a third-party deployment tool. You can export unmanaged clients.
You can export these packages as a single executable file or as a series of files in a directory. The method that you choose depends on your deployment method and whether you want to upgrade client software in groups. Typically, if you use Active Directory Group Policy Object, you do not choose to export to a single executable file.
Symantec occasionally provides updated packages of installation files, usually when a new product version releases. You can automatically update the client software on all managed Windows clients in a group with the AutoUpgrade feature. You do not need to redeploy software with installation deployment tools.
Table: Client installation package-related tasks