Upgrade Symantec Endpoint Encryption client with a GPO deployment script (upgrade to newer SEE Client)

Products

• Endpoint Encryption

Issue/Introduction

 This article will discuss how to deploy the SEE Client via GPO functionality. 

For more information on how to upgrade the SEE Management Server, see the following article:
179347 - HOW TO: Install/Upgrade Symantec Endpoint Encryption Management Server (SEE Management Server)

 

Resolution

Although it is possible to deploy software via GPO, Symantec Engineering highly recommends deploying the SEE Client software through deployment solutions, such as IT Management Suite (Altiris).  The IT Management Suite solution provides a wealth of functionality that is easily done and provides additional logging capabilities with reporting for quick analysis of deployments to the enterprise.  GPO does not have the breadth and richness of deployment that this deployment solution is capable of. 
EPG-36106

 

If you are not able to use a deployment solution, when you enforce the GPO, the script downloads the client installation package (.MSI file) from a network-accessible location to all of the subscribed client computers. The client software is updated upon rebooting the client computers.

For information about using a startup script to upgrade Symantec Endpoint Encryption clients through a GPO, refer to the Symantec Endpoint Encryption Management Server Online Help or the Symantec Endpoint Encryption Upgrade Guide.

Note: If the currently installed version of the Symantec Endpoint Encryption client software was deployed using a GPO, update the GPO to remove the original MSI file before you reconfigure it to deploy the startup script. When you remove the original MSI file from the GPO, make sure that you do not uninstall the client software.

To obtain this script and for further guidance, please reach out to Symantec Encryption Support.