SAV 9 - Symantec AntiVirus 9.0

[jbourgui]

just a couple of quick questions for all of you...

- do you have to ask users to uninstall previous versions of Norton/Symantec AV and/or Liveupdate previous to running this? I wouldn't think that this would make sense, since this is meant to be an unattended install, but what happens if Norton Internet Security (with Norton AV) or a previous version of Symantec Corporate AV (or even McAfee!?) are on the end user's system? is there some sort of unattended Norton/Symantec uninstaller?

- will this process automatically install with the end user's language, or only english? I have users spread across the globe, and it'd be convenient if this install worked for all of them seamlessly.

- is there a way to get scheduled automatic liveupdates to happen at a different default time than "every Friday at 8pm", which is usually when people have their machines turned off?

- is there a way to get the "scan for expanded threats" turned ON by default in every scan?

Thanks for everyone's hard work to get this together... it's a real time saver!

-joe

[prathapml]

- If a previous version of SAV is running, the SAV9 setup will automatically manage the uninstall and upgrade. If NAV or some other antivirus is running, I believe you can use the "/uninstall" switch on the original installer package. Also, please note that running more than one Anti-Virus at a time will result in lot of problems. But then, normally an unattended install means that you have pre-decided what are the things going into a setup of a raw machine (so there's nothing existing before this), so that shouldn't be a source of worry.....

- Hmmm..... This is a good idea actually, but needs more work than is worth putting in, to make it happen. It will install in its own language - if you have a spanish version of SAV9 on the setup, it will simply install spanish language version of SAV9, that's all - no auto-detection of language - so that's a disappointment for you.

- You can pre-configure live-update features using the LU-Admin app : look here

- SAV settings can be pre-configured when making a distributable setup EXE. Look on the CD for further help about this.

Hoping this helps.....

[Cee-Kay]

Thanks for the words of advice, however the solution that I posted worked twice for me on a clean installation of Windows.

Sorry if this didn't work for you, at least I suggested a possibile solution!

It is easy to be judgemental and negative, perhaps Ill just spectate in future, and leave the forum to you guys.

[prathapml]

@Cee-Kay

That's exactly the sort of dis-couragement I was afraid would get rubbed-off....

You can see that there was plenty of response to your solution. Do keep contributing - just because one person (not exactly good-naturedly) was not appreciative of you doesn't mean you should stop trying to help where you can. The rest of us are all in favour of new wind blowing across us stale old-timers. In fact, you can see that even the one who was critical of your method was initially happy to try it. Please do not move away from the scene.

Some ideas work, and some don't - we just have to accept that and keep digging for solutions.

[jbourgui]

1 - But then, normally an unattended install means that you have pre-decided what are the things going into a setup of a raw machine (so there's nothing existing before this), so that shouldn't be a source of worry.....

2 - You can pre-configure live-update features using the LU-Admin app : look here

3 - SAV settings can be pre-configured when making a distributable setup EXE. Look on the CD for further help about this.

prathapml, thanks for the quick response! I'm numbering my responses to match with yours...

1 - I'm distributing this unattended install for many machines around the world that I've never seen/touched, so they may or may not have AV soft installed already... not an ideal situation, but how often is IT? :-/

2 - If I'm wanting the users to update off of the Symantec LU server (I don't have a LU server set up in house), can I still pre-configure the client LU options with LU-Admin?

3 - rtfm, I know, I know... I looked at all of the pdf docs on the cd, some useful, some not. I'm assuming that you meant that I should use the packager to put together the client options (such as scanning for expanded threats, etc). If I should be using the packager, where do I get a .pmi file for Sym AV Corp 9? I thought that the packager wasn't usable with 9.... If it wasn't the packager you were talking about, would you mind elaborating some more so that I can figure out how to create a custom .msi file with the options I need...

Thanks!

(as for Cee-Kay, I appreciate EVERYONE's input, whether it works for me specifically or not, since it gives me ideas that I may not have tried yet. thanks, ck!)

-joe

[bmill99]

I can confirm, It doesn't work.

[weda]

here's how i installed sav 9 with RunOnceEx.cmd

set SAVSERVER=MySAVServer

REG ADD %KEY%\070 /VE /D "Symantec AntiVirus Corp 9.0" /f

REG ADD %KEY%\070 /V 1 /D "\"%CDROM%\software\sav\Symantec AntiVirus.msi\" ADDLOCAL=SAVMain,SAVUI,EMailTools,OutlookSnapin,Pop3Smtp,QClient NETWORKTYPE=1 SERVERNAME=%SAVSERVER% ENABLEAUTOPROTECT=1 RUNLIVEUPDATE=0 REBOOT=ReallySuppress /qn" /f

enjoy. (i know i am)

[xper]

Who ask you... Removed by admin

7.a You are expected to be mature when discussing in threads. Racism, pornography, threatening, profanity, or excessive vulgarity is not tolerated. You will be promptly banned. No Exceptions.

Thread cleaned up. Please stay on topic.

Thanks

[jbourgui]

thanks everyone for all the great info... I've got my unattended install package pretty much ready to go... a quick question, though..

does anyone know how to force the install to have certain options changed in SAV? for example:

- default to scheduling Live Update to run at a different time than Fridays at 8pm (when users have their machines off)

- default to scanning for "expanded threats" in every scan

- set file system auto-protect to automatically be on, and to turn back on 10 minutes after the end user turns it off (like you can do in a Managed environment)

it'd be great to know how to set these options, since having to touch every machine to set options is almost worse than having to install by hand!

cheers!

-joe

[sleepnmojo]

@Cee-Kay, do you have a link to the LuMMInst.exe file. the link is not working anymore. I was going to test it out.

[1chaoticadult]

ftp://ftp.symantec.com/public/english_us_...ate/lusetup.exe

[Cee-Kay]

@Cee-Kay, do you have a link to the LuMMInst.exe file.  the link is not working anymore.  I was going to test it out.

Unfortunately people reported problems with that method so I removed the file from my FTP server. I'm currently working on a alternative solution.

[Got KarmA?]

Thanks for the info in this thread, it was greatly informative.

I've used the MSI and command line parameters to successfully include this in an unattended install, however don't know how to lock it down.

Our 8.1 was previously rolled out as a managed tool either by manually running a package created in the symantec packager or through the nt client install utility through the network. When they came down, these installs were locked down so that users couldn't uninstall, change settings, or manually kick off a liveupdate.

This is the same case with 9.0 if I use the nt client install tool in the symantec system center, but if I use an MSI file with the following parameters, it is completely open for tampering:

ECHO.
ECHO Installing Norton Antivirus Corporate 9.0
NAV90\NAV90.msi /QN NETWORKTYPE=1 SERVERNAME=KNXW2K3-AD01

I'm under the impression that the symantec packager is no longer working with 9.0 since it's in MSI format ... so what are my options here?

Thanks!

[Got KarmA?]

nevermind, it turns out the policy is inherited from the server at a later date. I came in this morning and the PC's that had it installed were locked down.

[jmccord]

Hello folks,

I am sorry that I am to stupid to understand this... but I am having problems rolling up the SAV 9.0 installation with the patch 2. I have a copy of the installation cd in a folder on my desktop called "C:\Documents and Settings\jfmccord\Desktop\SAV Corporate Edition 9.0". I ran the command that was specified above and created the new installaiton folder called "C:\Documents and Settings\jfmccord\Desktop\New Install." I downloaded the virus definition update and have it copied over (I think) into the right folder which was "C:\Documents and Settings\jfmccord\Desktop\New Install\program files\Symantec AntiVirus\Virus Defs". I think I have it this far... the problem I am having is the next step of actually combining the new installation of SAV 9.0 with patch two. Can anybody help a poor soul from WV?

Thanks,

John