Remotely deplolying SymDiag

Products

• Endpoint Protection
• Mail Security for Microsoft Exchange

Issue/Introduction

You want to remotely deploy the Symantec Diagnostic Tool (SymDiag).

Resolution

Symantec Endpoint Protection Manager (SEPM) provides two ways of deploying client install packages to remote systems. These client deployment functions can be repurposed to launch SymDiag remotely.

By wrapping SymDiag in a zip container it is possible to configure SymDiag to launch with the needed command-line parameters.

Note: Running SymDiag in this way will cause it to run under the local System account. This can impact some data collection involving the user account context, including the Threat Analysis Scan.

Client Deployment Wizard

For detailed steps, see Using the Symantec Endpoint Protection Manager’s Client Deployment Wizard to deploy SymDiag

ClientRemote.exe

In much the same way the utility ClientRemote.exe can be used to deploy SymDiag. This utility can be found in the following directory:

<SEPM Install Directory>\tomcat\bin

…where…

<SEPM Install Directory> = HKEY_LOCAL_MACHINE\SOFTWARE\Symantec Endpoint Protection\SEPM\’TargetDir’