How can I deploy the Symantec Management Agent Using a Domain GPO (Group Policy Object)?
search cancel

How can I deploy the Symantec Management Agent Using a Domain GPO (Group Policy Object)?

book

Article ID: 389544

calendar_today

Updated On:

Products

Client Management Suite IT Management Suite

Issue/Introduction

You would like to be able to deploy the Symantec Management Agent by using Active Directory Group Policy Object and would like to know if this is possible.

Environment

ITMS 8.x

Cause

N/A

Resolution

There is an MSI file named AeXNSCInstSvc.msi located at NSCap\Bin\Win32\X86\NS Client Installation.  This MSI accepts switches that can be used to configure the Symantec Management Agent.  Please see the table located below.  Unfortunately Microsoft Active Directory Group Policy Object does not allow for the use of command line switches and only permits the use of an MSI file without command line switches.

For information on MSI Public Properties, see the following table.

MSI Public Property

Description

NS

Name of the Notification Server the Altiris Agent will report to (without leading \\). This argument is required.

NS_WEB

(Optional) Specifies the Notification Server Web the Altiris Agent connects to. http://NSName/Altiris, by default.

SOURCE_URL

URL used to download AEXNSC. By default, its retrieved from the Notification Server.

AGENT_PARAMS

Altiris Agent parameters in AexSVCInstSvc that can be passed to AEXNSC.EXE:

  • notrayicon
  • nostartmenu
  • preconfig

SERVICE_PARAMS

Parameters that can be passed to AexSVCInstSvc:

  • -d path
  • -c chunk_size
  • -p pause_interval
  • -checkonly
  • -exe

There is currently no built-in way to distribute the Symantec Management Agent using Active Directory Group Policy Object.  You would need to create a transform for the MSI file and then you could use Active Directory.  The creation of this transform is not supported by Broadcom support.  

The recommended method would be to use the files AeXNSCHTTP or AeXNSCHTTPs found by default at:  C:\Program Files\Altiris\Notification Server\NSCap\bin\Win32\X86.  These files contain everything the computer requires to install the Symantec Management Agent and connect back to your SMP server.