Hello all - We are currently in the middle of rolling out System Center Endpoint protection via SCCM. However we need a manual/off-line standalone installer in case SCCM can't get it on a PC for whatever reason.
I went to our Volume site and did find a ISO download for SCEP under SCCM 1511 Current Branch. It is 28MB which would seem like the installer for PC's. The name is: 'SWDVD5SysCtrEndpntPrtctn1511MultiLangEPforWindowsMLFX20-81117.ISO' Is this right? Also this weekend we upgraded from SCCM 1606 to 1610. If I use the ISO version of the installer, will it work if the server/client is running at a version that is different from the ISO installer? Does it have to update to a newer version of SCEP?
If we manually install the 1511 version of SCEP, will it pick up polices if it wasn't originally installed automatically by SCCM? That media should work to manually install SCEP. It's fine to have different version of scep clients running in your environment.
I have SCCM 2012 SP1 installed and working fine for everything. My issue is that I'm beginning to build Server 2012 R2 servers in my environment.and Endpoint will not install. I push the client, the client installs fine, but I get the 'Failed - System Center 2012 cannot be installed on your OS.
Some Updates can help to update SCEP client to a newer version, for example Update for System Center Endpoint Protection 2012 Client - 4.10.209.0 (KB3209361) can help to update agent to version 4.10.209.0. As long as the system client is been managed by configuration manager and with client settings enabled for endpoint protection by CM, it will pick up policies. Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact.
Recently I had to deploy System Center Endpoint Protection (SCEP). SCEP was not installing on clients. I knew I would run into problems because Symantec Endpoint Protection was on these clients and there was a password required to uninstall it. Sure enough the require uninstall password was causing the issue. Here are the details: From the EP log on the client:%systemdrive% WINDOWS CCM Logs EndpointProtectionAgent.log Failed to install endpoint protection client with exit code = 0x8004ff67. And Detail error message is: EppSetupResult HRESULT=0x8004FF67 Description=System Center 2012 Endpoint Protection installation error. The System Center Endpoint Protection Setup wizard was unable to remove one or more programs that conflict with System Center Endpoint Protection.
To install System Center Endpoint Protection you must manually uninstall the following programs and then run the wizard again. Error code:0x80041108.
Programs: Symantec Endpoint Protection LiveUpdate 3.3 (Symantec Corporation) I performed a manual install of SCEP just to see what would happen. Here is the resulting error when it came time to remove Symantec Endpoint Protection. Manually uninstalling Symantec Endpoint Protection on 10,000 clients was not an option. Here is what I had to do to get past this. I had to create a batch file that performed the following steps. Change to the Symantec directory. Stop the Symantec client service while inserting the password.
Delete two Symantec registry keys. Change to the local ccmsetup directory. Kick off the System Center Endpoint Protection Install. I placed my batch file in the packages directory on the SCCM server and pushed it out via software deployment to the clients. This is what was in my batch file: cd C: Program Files Symantec Symantec Endpoint Protection smc -p YOURPASSWORDHERE -stop regedit.exe /s SERVERNAME SHARENAME removesymantecep.reg cd C: Windows ccmsetup SCEPInstall.exe /s NOTE: The default password for Symantec Endpoint Protection is symantec. In the registry file add “-“ after “=” on these two keys “smcexittest” and “SmcInstData” They should look like this: “smcexittest”=- “SmcInstData”=- The registry path to these keys is: HKEYLOCALMACHINE SOFTWARE Symantec Symantec Endpoint Protection SMC Once this went out to the clients it was a smooth uninstall of Symantec and a smooth install of System Center Endpoint Protection without bothering the end user or rebooting the client PC.