10/28/2014 Enterprise Support - Symantec Corp.

- Preparing Windows and Mac computers for remote deployment

Norton
Small Business
Enterprise
Partners

Products & Solutions

http://www.symantec.com/business/support/index?page=content&id=HOWTO80805 1/14
10/28/2014 Enterprise Support - Symantec Corp. - Preparing Windows and Mac computers for remote deployment

Support & Communities

http://www.symantec.com/business/support/index?page=content&id=HOWTO80805 2/14
10/28/2014 Enterprise Support - Symantec Corp. - Preparing Windows and Mac computers for remote deployment

http://www.symantec.com/business/support/index?page=content&id=HOWTO80805 3/14
10/28/2014 Enterprise Support - Symantec Corp. - Preparing Windows and Mac computers for remote deployment

Security Response

http://www.symantec.com/business/support/index?page=content&id=HOWTO80805 4/14
10/28/2014 Enterprise Support - Symantec Corp. - Preparing Windows and Mac computers for remote deployment

Try & Buy

http://www.symantec.com/business/support/index?page=content&id=HOWTO80805 5/14
10/28/2014 Enterprise Support - Symantec Corp. - Preparing Windows and Mac computers for remote deployment

http://www.symantec.com/business/support/index?page=content&id=HOWTO80805 6/14
10/28/2014 Enterprise Support - Symantec Corp. - Preparing Windows and Mac computers for remote deployment

Preparing Windows and Mac

computers for remote
deployment
Article:HOWTO80805 | Created: | Updated: | Article URL
2012-10-24 2014-09-21 http://www.symantec.com/docs/HOWTO80805
(http://www.symantec.com/docs/HOWTO80805)

Article Type
How To

Product(s)
Show all (javascript:;)

Subject
Show all (javascript:;)

Languages
http://www.symantec.com/business/support/index?page=content&id=HOWTO80805 7/14
10/28/2014 Enterprise Support - Symantec Corp. - Preparing Windows and Mac computers for remote deployment

Show all (javascript:;)

Preparing Windows and Mac computers

for remote deployment
Table: Windows remote deployment preparation tasks (#v16821912) lists
the tasks that
you must do on Windows operating systems to successfully install
the client remotely. See your Windows documentation for more
information on any tasks you do not know how to perform.

Table: Mac remote deployment preparation tasks (#v95127191) lists

the tasks that you
must do on Mac operating systems to successfully install the
Symantec Endpoint Protection client remotely. See your Mac
documentation for more information on any tasks you do not know
how to perform.

Note: You use this method to deploy the Symantec Endpoint Protection Mac
client, and not the Symantec Network Access Control On-Demand Mac
client.

Table: Windows remote deployment preparation tasks

Operating Tasks
system

Prepare Windows Windows XP computers and Windows Server 2003 servers

XP computers and
Windows Server
2003 servers that
are installed in
workgroups
that are installed in workgroups do not accept remote
deployment by default. To permit remote deployment, disable
Simple File Sharing.
Note: This limitation does not apply to computers that
are part of an Active Directory domain.

You may also need to perform the following tasks:

http://www.symantec.com/business/support/index?page=content&id=HOWTO80805 8/14
10/28/2014 Enterprise Support - Symantec Corp. - Preparing Windows and Mac computers for remote deployment

Ensure that the Administrator account does not have a

blank password.

Disable the Windows Firewall, or allow the required

ports for communication between the client and
Symantec Endpoint Protection Manager.

Prepare Windows Windows User Account Control blocks local administrative

Vista, Windows 7, accounts from remotely accessing remote administrative
or Windows shares such as C$ and Admin$. You do not need to fully
Server 2008 / disable User Account Control on the client computers during
2008 R2 the remote deployment if you disable the registry key
computers LocalAccountTokenFilterPolicy.

To disable UAC remote restrictions, see:

http://support.microsoft.com/kb/951016 (http://support.microsoft.com/kb/951016)

If the Windows client computer is part of an Active Directory

domain, you should use domain administrator account
credentials for a remote push installation.

Perform the following tasks:

Disable the Windows Firewall, or configure the firewall

to allow the required traffic.

Disable the Sharing Wizard.

Enable network discovery by using the Network and

Sharing Center.

Enable the built-in administrator account and assign a

password to the account.

Verify that the account has administrator privileges.

Disable or remove Windows Defender.

Prepare Windows Before you deploy, perform the following tasks:

8 / 8.1 / 8.1
Update 1 or Disable the Windows Firewall, or configure the firewall
Windows Server to allow the required traffic.
2012 / 2012 R2 /
2012 R2 Update 1 Disable the registry key

http://www.symantec.com/business/support/index?page=content&id=HOWTO80805 9/14
10/28/2014 Enterprise Support - Symantec Corp. - Preparing Windows and Mac computers for remote deployment

computers LocalAccountTokenFilterPolicy.

To disable UAC remote restrictions, see:

http://support.microsoft.com/kb/951016
(http://support.microsoft.com/kb/951016)

Enable and start the Remote Registry service.

Disable or remove Windows Defender.

Table: Mac remote deployment preparation tasks

Operating Tasks
system

Prepare the Before you deploy, perform the following tasks on the Mac
Mac computers:
computers on
any supported Click System Preferences > Sharing > Remote Login and
operating either allow access for all users, or only for specific users,
system such as Administrators.

If you use the Mac firewall, disable stealth mode. With

stealth mode enabled, the remote push installation cannot
discover the client through Search Network.

To disable stealth mode on the Mac, see the following

Apple knowledge base article that applies to your version
of the Mac operating system.

OS X Mountain Lion: Prevent others from discovering your

computer (http://support.apple.com/kb/PH11198) (10.8)

OS X Mavericks: Prevent others from discovering your Mac

(http://support.apple.com/kb/PH14190) (10.9)

Ensure that the firewall does not block the port that Secure
Shell (SSH) uses, which is by default TCP port 22. This
port allows the required communication for remote login.

Uninstall any third-party virus protection software suites.

See the documentation for the third-party software.

http://www.symantec.com/business/support/index?page=content&id=HOWTO80805 10/14
10/28/2014 Enterprise Support - Symantec Corp. - Preparing Windows and Mac computers for remote deployment

If the Mac client computer is part of an Active Directory domain,

you should use domain administrator account credentials for a
remote push installation. Otherwise, have the administrator
credentials available for each Mac to which you deploy.

See About the communication ports that Symantec Endpoint Protection uses (index?

.
page=content&id=HOWTO81103#v7054802)

See Installing clients with Remote Push (index?page=content&id=HOWTO80788#v16194683) .

See Preparing for client installation (index?page=content&id=HOWTO80804#v16742985) .

Legacy ID

v16742999_v81626096

Article URL http://www.symantec.com/docs/HOWTO80805

Terms of use for this information are found in Legal Notices

(http://www.symantec.com/about/profile/policies/legal.jsp)

Email this article

Print
Subscribe via email
Bookmark this article

Please Sign In
Login using SymAccount.

http://www.symantec.com/business/support/index?page=content&id=HOWTO80805 11/14
10/28/2014 Enterprise Support - Symantec Corp. - Preparing Windows and Mac computers for remote deployment

Knowledge Base Search

Knowledge Base Search

Enter keywords

Rate this Article

Did this article answer your question or resolve your issue?
Yes No Not Sure
Thank you.

Did this article save you the trouble of contacting technical support?
Yes No

How can we make this article more helpful?

Yes No Not Sure
Yes No
Enter suggestions and feedback for this
article here (optional)

characters remaining :939

Email Address (Optional)

SUBMIT

MySymantec
MySymantec

Create a Support Case

Manage a Support Case
Manage Subscriptions
Ask a Question on Connect (Symantec Support Forums)
About SymWISE Support

http://www.symantec.com/business/support/index?page=content&id=HOWTO80805 12/14
10/28/2014 Enterprise Support - Symantec Corp. - Preparing Windows and Mac computers for remote deployment

Contacting Support
Contacting Support

Contact Technical Support

Business Critical Support Site

©1995 - 2014 Symantec Corporation

About Symantec|
Careers|
Events|
News|
Site Map|
Legal|
Legal Notices
License Agreements
Repository
Privacy|
Cookies|
Contact|
Norton Support
Business Support
Business Sales
Authentication Services
Corporate Information
RSS

Symantec [+]
AntiVirus|
Backup Software|
Encryption|
Virtualization|
Cloud Security|
Configuration Management|
Disaster Recovery|
File Recovery|
Remote Access Software|
Business Continuity
Norton [+]
AntiVirus|
Norton Store|
Internet Security|
Mac AntiVirus|
Mobile Security|
http://www.symantec.com/business/support/index?page=content&id=HOWTO80805 13/14
10/28/2014 Enterprise Support - Symantec Corp. - Preparing Windows and Mac computers for remote deployment

Norton|
Spyware|
Virus Protection|
Virus Removal|
Virus Scan
Website Security Solutions [+]
SSL|
SSL Certificates|
Extended Validation|
Two-Factor Authentication|
Identity Protection|
Website Malware Scan|
Code Signing|
Public Key Infrastructure|
Website Vulnerability Assessment|
VeriSign
PC Tools [+]
Internet Security|
Spyware Doctor with Antivirus|
Performance Toolkit|
Mobile Security|
File Recovery|
Spyware Doctor|
Privacy Guardian|
Free Antivirus|
Password Manager|
Registry Mechanic

http://www.symantec.com/business/support/index?page=content&id=HOWTO80805 14/14