Instructions for installing Symantec Endpoint Protection on the XP Embedded Operating System

Products

• Endpoint Protection

Issue/Introduction

You need to install managed Symantec Endpoint Protection (SEP) clients on thin clients with the XP Embedded OS.

Resolution

The procedure below was developed using HP t5730 thin clients and may not apply to other models hosting the XP embedded OS.
The procedure below is NOT supported by Symantec Technical Support and is provided only for your convenience.

Follow the steps below to prepare your Thin Clients for SEP install:

1. Disable the EWF (Enhanced Write Filter) using the following command:
   
   ewfmgr.exe c: -Disable
2. Restart the Thin Client.
3. Change the RAMDisk size:
   1. Control Panel\HP RAMDisk Manager.
   2. Set the RAMDisk size to the highest value (64MB) (do not restart).
4. Change the temporary folder to a USB drive, network drive, or a folder on C: with 300+ MB available.
   1. Control Panel>System>Advanced.
   2. Change the “User variables for Administrator” for TEMP and TMP to a USB drive or a network drive with adequate free space.
5. Take note of the existing TEMP and TMP paths.
6. Change the “System variables” TEMP and TMP to a USB drive or a network drive with adequate free space and take note of the existing TEMP and TMP path.
7. Restart the HP t5730 thin client.
8. Install the Windows Firewall:
   1. HP XPe Add-On (Windows Firewall) 2.00 Rev. B (17 May 2009) sp43811.exe.
   2. Run “Add_Windows_Firewall_2.00_B1.exe –s” from the extracted components.
   3. Wait for the “Netsh” command windows.
9. Restart.
10. Disable the Windows Firewall.
11. Install Unicode support:
    1. Copy c_20127.nls from a Windows XP Pro computer to C:\Temp on the Thin Client.
    2. Enable the "20127 (US-ASCII)" option at the following location.
       
       Control Panel>Regional and Language Options>Advanced>Code page conversion tables
    3. When prompted, reference c_20127.nls from C:\Temp.
12. Install Symantec Endpoint Protection client. (recommend running the install package directly on the thin client)
    • Verify there is ether no Windows Firewall, or it is disabled.
    • The install process may take longer than expected (30+ min).
    • Launch the SEP client to verify the status.
13. Restart.
14. Re-enable the Windows Firewall.
15. Add an exception in the Windows Firewall for Symantec Endpoint Protection.
16. Restart.
17. Change the temporary folders back to their original locations.
    1. Control Panel>System>Advanced.
    2. Change the Variables TEMP and TMP to their original setting:
       
       Z:\%username%\Temp or Z:\Temp
18. Re-enable the EWF using the following commands:
    
    ewfmgr.exe c: -Commit
    ewfmgr.exe c: -Enable
19. Restart.

NOTE: The SEP client will have the standard SEP client footprint in terms of disk space, RAM and CPU usage as on a standard PC or laptop.

NOTE: The SEP client does not use the embedded APIs that allow operation in conjunction with the write filter feature so write filters need to be disabled during Liveupdate on the client. If write filters are required to be started at all times on the client then install SEP for embedded product instead of Symantec Endpoint Protection 11.