Remotely Deploy SymDiag

book

Article ID: 181446

calendar_today

Updated On:

Products

Endpoint Protection Mail Security for Microsoft Exchange

Resolution

Symantec Endpoint Protection Manager (SEPM)

The SEPM provides two ways of deploying client install packages to remote systems.  These client deployment functions can be repurposed to launch the Symantec Diagnostic Tool (SymDiag) remotely.  By wrapping SymDiag in a zip container it is possible to configure SymDiag to launch with the needed command-line parameters. It should be noted that running SymDiag in this way will cause SymDiag to run under the local System account. This can impact some data collection involving the user account context including the Threat Analysis Scan.
Client Deployment Wizard
For detailed steps on using the Client Deployment Wizard see…
ClientRemote.exe
In much the same way the utility ClientRemote.exe can be used to deploy SymDiag. This utility can be found in the following directory:
<SEPM Install Directory>\tomcat\bin
…where…
<SEPM Install Directory> = HKEY_LOCAL_MACHINE\SOFTWARE\Symantec Endpoint Protection\SEPM\’TargetDir’
 
Symantec Network Access Control
Symantec Network Access Control can be used to require clients on the network to run a scan and report back results. This function can be leveraged to deploy SymDiag. Contact Sales or Support for more information on this product.
 
Symantec Endpoint Management
Symantec Endpoint Management can be used to deploy and launch software on client systems. This product can be used to deploy and run SymDiag. Contact Sales or Support for more information on this product.