红叶的技术日志

Question/Issue:
This document describes how to install Symantec AntiVirus 10.x by using a Active Directory Group Policy Object in Windows 2003/2000.

Symptoms:
Installing Symantec AntiVirus 10.x using a Group Policy Object (GPO) installation This document describes how to install Symantec AntiVirus 10.x by using a Active Directory Group Policy Object in Windows 2003/2000.

Solution:

• This procedure works only with Symantec AntiVirus installations or upgrades. It does not work with Symantec Client Security.
• Symantec AntiVirus cannot be added to a software installation Group Policy Object for Active Directory Deployment if the same version of Symantec AntiVirus is already installed.
• Confirm that your DNS server is set up correctly. The correct setup is very important because Active Directory relies heavily on your DNS server for computer communication. To test the setup, from a client computer that has joined the domain, try to ping the Windows 2003/2000 Active Directory computer, and then ping in the opposite direction. (Use the fully qualified domain name; the use of the computer name alone does not call for a new DNS lookup.) Use the following format:
  
  ping computername.fullyqualifieddomainname.com

• From a Windows 2003/2000 Active Directory computer, share the WIN32 folder from the Symantec AntiVirus server installation that is in the following location:
  
  \Program Files\SAV\Symantec AntiVirus\CLT-INST\WIN32
  
  If Symantec AntiVirus client is installed on the Windows server, copy the Win32 folder from a Symantec AntiVirus primary or secondary server to a location on the Windows 2003/2000 Active Directory computer, and then share the folder.
  
• On the Windows Taskbar, click Start > Programs > Administrative Tools > Active Directory Users and Computers.
• In the console tree, right-click the organizational unit to which you plan to deploy clients, and then click Properties.
• On the Group Policy tab, click New to create a specific policy.
• Type the following as the new policy name:
  
  Elevated Group Policy
  
  
• Click Elevated Group Policy, and then click Edit.
• Under the Computer Configuration, expand Software Settings.
• Right-click Software installation, and then click New > Package.
• In the Open dialog box, type the Universal Naming Convention (UNC) path to the shared WIN32 folder that contains the MSI package.
  Do not browse to the location. Be sure that you use the UNC path to the shared folder, as in the following example:
  
  \\<server name>\WIN32\Symantec AntiVirus.msi
  
  
• Click the Symantec AntiVirus.msi file, and then click Open. Click Assigned, and then click OK.
  The package is listed in the right pane of the Group Policy window.
• Under Computer Configuration, expand Administrative Templates > Windows Components.
• Click Windows Installer.
• In the right pane, double-click Always install with elevated privileges.
• Check Enable.
• If the option is present, check Check to force setting on; uncheck to force setting off.
  Some organizational units may not show this option.
• Click Apply, and then click OK.
• Close the Group Policy window, and then click Close or OK.
• Close Active Directory Users and Computers.
• To apply the changes, on the Windows taskbar, click Start > Run.
• In the Open box, do one of the following:
  
  In Windows 2003, type the following text:
  
  gpupdate /force
  
  In Windows 2000, type the following text:
  
  secedit /refreshpolicy machine_policy
  
  
• Click OK.
  
  When the client computer starts, the Symantec AntiVirus client software package is installed before the logon. For Symantec AntiVirus client upgrades, the computer restarts after the installation.

http://jiaohl.blog.ccidnet.com/blog-htm-uid-35280.html    原Blog