Installation Guide

Symantec Endpoint Protection

Symantec Management Agent

Last edited on 1/3/2011

Installation Guide
Table of Contents
1.

Prerequisites ................................................................................................................................................ 2

Installation over Internet............................................................................................................................. 3

3.

Installation from CD..................................................................................................................................... 8

4.

Verify a successful installation .................................................................................................................. 13

5.

Troubleshooting ........................................................................................................................................ 15

Page 1 of 19

Installation Guide
1. Prerequisites
Unless otherwise specified, all updates, editions, and Service Packs (SPs) for a listed Windows version are
supported, e.g. Windows 7 = Windows 7 Home Premium, Professional, and Ultimate editions, all SPs. As
Microsoft releases new Service Packs for Windows, these requirements may need to be re-evaluated--the
newest Service Pack may require an updated version of the Symantec Product.
Minimum Requirements
Processor

32-bit processor for Windows: 1-GHz Intel Pentium III or equivalent minimum (Intel
Pentium 4 or equivalent recommended)
64-bit processor for Windows: 2-GHz Pentium 4 with x86-64 support or equivalent
minimum. Itanium processors are not supported.

Physical RAM

512 MB of RAM, or higher if required by the operating system

Hard drive

Hard disk: 700 MB or more free space

Display

800 x 600

Operating System

Windows XP Home or Professional (32-bit, SP2 or later; 64-bit, all SPs)

Windows XP Embedded
Windows Vista (32-bit, 64-bit)
Windows 7 (32-bit, 64-bit, RTM and SP1)
Windows Server 2003 (32-bit, 64-bit, R2, SP1 or later)
Windows Small Business Server 2003 (32-bit)
Windows Server 2008 (32-bit, 64-bit, R2, SP1, and SP2)
Windows Small Business Server 2008 (64-bit)
Windows Essential Business Server 2008 (64-bit)
Windows Small Business Server 2011 (64-bit)

Others

Administrative right account on Computer

Internet Explorer 7 or 8
Internet Explorer settings enabled to download of ActiveX controls
User Account Control is disabled on Windows Vista, Windows 7

Page 2 of 19

Installation Guide
2 Installation over Internet
2.1 From Internet Explorer, browse to
http://alms.ytleducation.com.my/Altiris/NS/Agent/SymantecAgent.html
2.2 Click on Symantec Management Agent to download and save the installation file to your computer.
Click to
download
installer

2.3 Double click on the installation file to begin installation.

Double click to
begin
installation

2.4 If you have User Access Control (UAC) enabled (for Windows Vista and Windows 7), click on Yes to allow
the installation.

Click on Yes
button

2.5 Symantec Management Agent will begin installing.

Page 3 of 19

Installation Guide
2.7 Once installed, you will see the Symantec Management Agent icon on the Windows taskbar.
Symantec
Management
Agent installed

2.8 Symantec Endpoint Protection installation package will be delivered to your computer over the internet.

2.9 Once the package is delivered, the Symantec Endpoint Protection installation will begin. The installation
will detect for other Anti-Virus programs (such as AVG 2011) installed on your computer, and will
perform un-installation of such programs in the background. This will typically take about 5 to 30
minutes for the un-installation.
Note: Do NOT stop the un-installation process of the Anti-Virus program, as this will cause an
interruption to the setup process.
2.10 Once the current Anti-Virus program is un-installed, the Symantec Endpoint Protection installation
will begin installation in silent mode.

Page 4 of 19

Installation Guide
2.11

Symantec will prompt to keying the user information. Please keying the School code example like

Keying the
School code in
Name field.

Press Ok button
to complete

2.12 The Symantec Endpoint Protection icon will appears on the Windows taskbar icon after installation is
completed. You can reboot your computer to complete the installation.
Symantec
Endpoint
Protection
installed

Page 5 of 19

Installation Guide

2.13

Click Restart Now to restart your computer to complete the installation.

Click Restart
Now to restart
your computer.

2.14 After your computer is restarted, you will see the Symantec Endpoint Protection icon on the
Windows taskbar.

Symantec
Endpoint
Protection
installed

Page 6 of 19

Installation Guide
2.15 Double-click on the icon and you will see that Symantec Endpoint Protection is installed successfully
and your computer is protected.

Page 7 of 19

Installation Guide
3. Installation from CD
3.1 Check to make sure that you have the installation CD with below content

3.2 If the target is running Windows XP operating system, check to ensure that it is running windows XP
service pack (SP) 2 and above. Upgrade the target computer to Windows XP service pack 2 or above
before proceeding with endpoint installation using the provided CD or download the service pack from
below link. If you install from CD, the installer for service pack can be found in Windows XP SP2 folder.
Windows XP SP 2 download link:
http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=28
3.3 Insert the installation CD to your computer.
NOTE: It is important to determine your computer is on which version before you proceed, otherwise
installation process will fail.
For Windows 32bit System, browse to Windows-32bit folder
For Windows 64bit System, browse to Windows-64bit folder

3.4 Double click on setup to launch the installation.

Double click on
setup to begin
installation

3.5 If UAC (User Account Control) is not disabled on your computer, you will see the prompt as below. Click
Yes to continue with the installation.

Page 8 of 19

Installation Guide

Click on Yes to
continue

3.6 The installation will begin in the background.

3.7 Once installed, the Symantec Management Agent will appear on the Windows taskbar.

Symantec
Management
Agent installed

3.8 The installation will detect for other Anti-Virus programs (such as AVG 2011) installed on your computer,
and will perform un-installation of such programs in the background. This will typically take about 5 to
30 minutes for the un-installation.
Note: Do NOT stop the un-installation process of the Anti-Virus program, as this will cause an
interruption to the setup process.
3.9 Once the current Anti-Virus program is un-installed, the Symantec Endpoint Protection installation will
begin installation in silent mode.

Page 9 of 19

Installation Guide
3.10 Symantec will prompt to keying the user information. Please keying the School code example like
BES0106
Note: School code fill up is compulsory.
compulsory Please fill it up before\after
after you complete the symantec
installation.

Keying the
School code in
Name field.

Press Ok button
to complete

3.11 The Symantec Endpoint Protection icon will appears on the Windows taskbar icon after installation is
completed. You can reboot your computer to complete the installation.
Note: Check to ensure that the previous Anti-Virus
Anti Virus program such as Kaspersky or AVG is successfully
uninstalled. If previous Anti-Virus
Virus program is not successfully uninstalled, refer to step 3.14 to
uninstall it.
Symantec
Endpoint
Protection
installed

Page 10 of 19

Installation Guide
3.12

Click Restart Now to restart your computer to complete the installation.

Click Restart
Now to restart
your computer.

3.13 After your computer is restarted, you will see the Symantec Endpoint Protection icon on the
Windows taskbar.

Symantec
Endpoint
Protection
installed

3.14 Double-click on the icon and you will see that Symantec Endpoint Protection is installed successfully
and your computer is protected.

Page 11 of 19

Installation Guide
3.15 If the previous Antivirus program is not successfully uninstalled by Symantec, proceed to manually
uninstall it with below procedures. The removal tools are located in KAV-AVG uninstaller folder.
Previous antivirus
program is still
installed and must be
removed

For Kaspersky Antivirus, double click on kavremvr.exe in the CD, then key in the code displayed
by the remover tool and click Remove button to proceed to uninstall Kaspersky Antivirus.

Key in the
random code to
initiate removal
of Kaspersky
Antivirus
program

To remove AVG antivirus program, click on avg_remover.exe in the CD to initiate removal of

AVG antivirus program from the target computer, then clock Yes button to complete the
removal.
Click on the
executable and
Yes button to
remove AVG

Page 12 of 19

Installation Guide
4. Verify a successful installation
4.1 To ensure a successful installation, check to make sure that both Symantec Management Agent and
Symantec Endpoint Protection icons are displayed in Windows task bar.

Both Altiris agent icon

and SEP icon should
appear in the task bar

4.2 To check that SEP is functioning properly after installation, ensure that a green dot appears on SEP icon
when the computer is connected to Internet.

To verify connectivity to SEP server, click on Open Symantec Endpoint Protection, then go to click on
Help button on SEP GUI, select Troubleshooting. In the troubleshooting window, the client should
connect to server SEPM.YTLEDUCATION.COM.MY and the connection status should show Connected as
displayed by below screenshots.

Page 13 of 19

Installation Guide

4.3 To check that Altiris agent is functioning properly after installation, right click on the Symantec
Management Agent icon in the task bar, then click Symantec Management Agent Settings.

A functioning Symantec Management Agent should be able to connect to Altiris server with the
hostname ALMS.YTLEDUCATION.COM.MY and the Computer ID should also be assigned by the Altiris
Server upon successful connection to the server.

Page 14 of 19

Installation Guide
5. Troubleshooting
4.1 How to determine whether the client is connected and protected
The client uses a notification area icon to indicate whether the client is online or offline and whether the
client computer is adequately protected. You can right-click this icon to display frequently used commands.
The icon is located in the lower-right hand corner of the client computer desktop.
Icon Description
The client runs with no problems. It is either offline or unmanaged. Unmanaged clients are
not connected to a management server. The icon is a plain yellow shield.
The client runs with no problems. It is connected to and communicates with the server. All
components of the security policy protect the computer. The icon is a yellow shield with a
green dot.
The client has a minor problem. For example, the virus definitions may be out of date. The
icon is a yellow shield and a light yellow dot that contains a black exclamation mark.
The client does not run, has a major problem, or has at least one protection technology
disabled. For example, Network Threat Protection may be disabled. The icon is a yellow
shield with a white dot outlined in red and a red line across the dot.

4.2 Checking the connection or reconnecting to the management server

On the Status page, click Help > Troubleshooting.

In the Troubleshooting dialog box, click Connection Status.
In the Connection Status pane, you can see the last attempted connection and the last successful
connection.
To re-establish a connection with the management server, click Connect Now.

4.3 Using the ping command to test the connectivity to the management server
You can try to ping the management server from the client computer to test connectivity. To use the ping
command to test the connectivity to the management server

On the client, open a command prompt.

Type the ping command. For example:
ping name
where name is the computer name of the management server. You can use the server IP address in
place of the computer name. In either case, the command should return the server's correct IP
address.

If the ping command does not return the correct address, verify the DNS service for the client and check its
routing path.
Page 15 of 19

Installation Guide
4.4 Disable or Turn Off UAC (User Account Control) in Control Panel

Go to Start Menu -> Control Panel -> User Accounts and Family Safety -> User Account.
Click on User Account Control settings link

Click on User
Account Control
settings

Slide the slider bar to the lowest value (towards Never Notify), with description showing Never
notify me.

Slide to Never
Notify

Click OK to make the change effective.

Restart the computer to turn off User Account Control.

Page 16 of 19

Installation Guide
4.5 For installation over internet, what happens if UAC (User Account Control) is not disabled?
It is recommended to disable UAC on the clients computer.

If UAC is not disabled, the user will be prompted with below screen, choose Yes to start the
download.

Following, the Program Compatibility Assistant prompt will be shown as below.

Select This program installed correctly, and the Altiris Agent will download and install in the
background.

Page 17 of 19

Installation Guide
4.6 The installation did not remove my current Anti-Virus software. What can I do?
The Symantec installer is able to un-install most of the well-known Anti-Virus software available in the
market, but there are some Anti-Virus removal which are not supported. It is recommended to use the
manual un-installation method provided by your current Anti-Virus vendor.
Currently, the following Anti-Virus list is supported for un-installation.
Kaspersky Products
Kaspersky Internet Security 2009
Kaspersky Internet Security 7
Kaspersky Anti-Virus for Workstation 6.0.4
Kaspersky Anti-Virus for Workstation 6.0.2-6.0.3
Kaspersky Anti-Virus for Workstation 5.0.x
Kaspersky Anti-Virus 6.0.x
Kaspersky Anti-Virus for Windows Servers Enterprise Edition 6.0.2
McAfee Products
McAfee Security Center (McAfee Internet Security/McAfee Total Protection/McAfee VirusScan Plus)
McAfee VirusScan Enterprise 8.7i
McAfee VirusScan Enterprise 8.5i
McAfee VirusScan Enterprise 8.0
McAfee Agent=n
Microsoft Products
Windows Live OneCare=n
Trend Micro Products
Trend Micro Internet Security 2008
Trend Micro Internet Security 2009
Trend Micro OfficeScan Client
Sophos Products
Sophos AutoUpdate 2.x
Sophos Network Access Control 3.3
Sophos Network Access Control 3.5
Sophos Remote Management System 3.0
Sophos Remote Management System 3.1-3.2
Sophos Anti-Virus 7.6
Sophos Anti-Virus 9.x
Sophos Client Firewall 1.5-2.0
Sophos Client Firewall 2.5

Page 18 of 19