Symantec官方在AD域环境使用组策略分发SAV10.1客户端

钉子

Installing Symantec AntiVirus 10.x using a Group Policy Object (GPO) installation

Situation:
This document describes how to install Symantec AntiVirus 10.x by using a Active Directory Group Policy Object in Windows 2003/2000.

Solution:


Before you begin:

• This procedure works only with Symantec AntiVirus installations or upgrades. It does not work with Symantec Client Security.
• Symantec AntiVirus cannot be added to a software installation Group Policy Object for Active Directory Deployment if the same version of Symantec AntiVirus is already installed.
• Confirm that your DNS server is set up correctly. The correct setup is very important because Active Directory relies heavily on your DNS server for computer communication. To test the setup, from a client computer that has joined the domain, try to ping the Windows 2003/2000 Active Directory computer, and then ping in the opposite direction. (Use the fully qualified domain name; the use of the computer name alone does not call for a new DNS lookup.) Use the following format:
  
  ping computername.fullyqualifieddomainname.com

To install Symantec AntiVirus using a Windows 2003/2000 Active Directory Group Policy Object

• From a Windows 2003/2000 Active Directory computer, share the WIN32 folder from the Symantec AntiVirus Corporate Edition server installation that is in the following location:
  
  \Program Files\SAV\Symantec AntiVirus\CLT-INST\WIN32
  
  If Symantec AntiVirus Corporate Edition client is installed on the Windows server, copy the Win32 folder from the Symantec AntiVirus Corporate Edition CD to a location on the Windows 2003/2000 Active Directory computer, and then share the folder. The path on the CD is as follows:
  
  \Rollout\AVServer\CLIENTS\WIN32
• On the Windows Taskbar, click Start > Programs > Administrative Tools > Active Directory Users and Computers.
• In the console tree, right-click the organizational unit to which you plan to deploy clients, and then click Properties.
• On the Group Policy tab, click New to create a specific policy.
• Type the following as the new policy name:
  
  Elevated Group Policy
• Click Elevated Group Policy, and then click Edit.
• Under the Computer Configuration, expand Software Settings.
• Right-click Software installation, and then click New > Package.
• In the Open dialog box, type the Universal Naming Convention (UNC) path to the shared WIN32 folder that contains the MSI package.
  Do not browse to the location. Be sure that you use the UNC path to the shared folder, as in the following example:
  
  \\<server name>VPHOME\CLT-INST\WIN32\Symantec AntiVirus.msi
• Click the Symantec AntiVirus.msi file, and then click Open.
• Click Assigned, and then click OK.
  The package is listed in the right pane of the Group Policy window.
• Under Computer Configuration, expand Administrative Templates > Windows Components.
• Click Windows Installer.
• In the right pane, double-click Always install with elevated privileges.
• Check Enable.
• If the option is present, check Check to force setting on; uncheck to force setting off.
  Some organizational units may not show this option.
• Click Apply, and then click OK.
• Close the Group Policy window, and then click Close or OK.
• Close Active Directory Users and Computers.
• To apply the changes, on the Windows taskbar, click Start > Run.
• In the Open box, do one of the following:
  • In Windows 2003, type the following text:
    
    gpupdate /force
  • In Windows 2000, type the following text:
    
    secedit /refreshpolicy machine_policy
    

Click OK.
When the client computer starts, the Symantec AntiVirus client software package is installed before the logon. For Symantec AntiVirus client upgrades, the computer restarts after the installation.

时光的影子

顶在无顶处
摆脱顶底思维,向更高迈进