This document describes the procedures for installing Symantec Endpoint Protection 11.0 on a network that has no current Symantec AntiVirus software.
About installing Symantec Endpoint Protection 11.0
Installing Symantec Endpoint Protection 11.0 includes the installation of three main components: the Symantec Endpoint Protection Manager, a dedicated database, and the Symantec Endpoint Protection clients. Installation begins with the installation and configuration of the Manager and database. Client installation occurs after the manager and database are installed and configured.
Installing and configuring Symantec Endpoint Protection Manager
This is a two-part procedure that installs the Symantec Endpoint Protection Manager (part 1), and configures the Symantec Endpoint Protection Manager and its database (part 2), You can accept all of the default settings for the manager installation. To configure the Symantec Endpoint Protection Manager database you must add at least one custom value, which is a password.
To install Symantec Endpoint Protection Manager (SEPM)
To configure Symantec Endpoint Protection Manager
NOTE: In MR3 and higher, the password box will not accept special characters. Previous versions would accept those characters but would not pass them, causing a 'failed to connect to database' error upon completion.
When the installation finishes, you have the option of deploying client software with the Migration and Deployment Wizard. Log on to the console with the user name and password that you entered here.
Configuring and deploying client software
The Migration and Deployment Wizard lets you configure a client software package. The Push Deployment Wizard then optionally appears to let you deploy the client software package. If you do not use the Push Deployment Wizard at that time, you can start it manually by using ClientRemote.exe from the \tomcat\bin folder.
Note: This procedure assumes that you deploy client software to 32-bit computers and not to 64-bit computers. This procedure also has you select a folder in which to place installation files. You may want to create this folder before you start this procedure. Also, you need to authenticate with administrative credentials to the Windows Domain or Workgroup that contain the computers.
Deploying client software to computers that run firewalls, and that run Windows XP or Windows Vista, has special requirements. Firewalls must permit remote deployment over TCP port 139. Computers that are in workgroups and that run Windows XP must disable simple file sharing. To prepare the computers that run Windows Vista, read Preparing computers that run Windows Vista for remote client deployment.
To configure client software
Do not check Launch Administrator Console. It can take up to 5 minutes to create and export the installation package for your group before the Push Deployment Wizard appears.
To deploy the client software with the Push Deployment Wizard
Logging on to and locating your group in the console
Your first activity is to log on to the console and locate your group.
Logging on to the management console
The management console lets you manage clients.
To log on to the management console
About locating your group in the console
After you log on, you should locate the group that you created during installation. Then verify that the client computers to which you deployed software appear in that group.
Enabling Symantec Network Access Control
If you purchased Symantec Endpoint Protection with Symantec Network Access Control, follow these additional steps to enable Symantec Network Access Control.
To enable Symantec Network Access Control
Symantec Network Access Control is now enabled in Symantec Endpoint Protection Manager and on the clients in the group that you created.
"Preparing computers that run Windows Vista for remote client deployment" at:
This document is available in the following languages:
Login to Subscribe
Please login to set up your subscription.
Get support for your product, with downloads, knowledge base articles, documentation, and more.
Maximize your product competency and validate technical knowledge to gain the most benefit from your IT investments.
Set default language
Do you wish to save this as your future site?