Modified -

Creating a VPN to the client’s network

Go to Control Panel->Network and Sharing Centre

Enter in the IP address of the client and give the connection a name. Make sure that you tick ‘Allow other people to use this connection’ and ‘Don’t connect now’.

Enter in the credentials for the site. DO NOT tick ‘Remember this password’.

Un-tick ‘User default gateway on remote network’.

Find the Network icon in your system tray (marked 1) and click on it once. The Networks box should appear, select the VPN connection you just created (marked 2) and then click the ‘Connect’ button (marked 3). You will be prompted to enter the username and password for this site (the admin username and password). Once these have been entered you will be connected to the client’s network.

Join the machine to the domain

Click Start and then right click on ‘Computer’ (My Computer if on windows XP) and select ‘Properties’.

Click ‘Change settings’ under the ‘Computer name’ section.

Click the ‘Change’ button under the ‘Computer name’ tab.

Click the radio button next to ‘Domain’ and enter in the domain name of the client, but sure to put ‘.local’ after the domain name (as you are on a VPN). Click ‘Ok’, you will be prompted to enter a username and password for the domain (use the administrator credentials). You will then be prompted to restart, after the restart the machine will be connected to the domain.

Adding Printers across the VPN

Log on as the domain administrator (you will have to connect using the VPN connection on the logon screen). Find out the main server name for the site you are connected to.

Click ‘Start->Run’ and enter the server name in the ‘Open’ box, click ‘Ok’. If you are adding a printer shared from another workstation, enter the workstation name into the ‘Open’ box.

Find the printers you wish to add, right click on them and select ‘Connect’. You may be prompted to download the driver for this printer. Do this for each printer you wish to add.

LANWin RegComponents, Personalization and ITTrack

Click ‘Start->Run’ and enter in the server name followed by ‘\lanwin$’ (on some sites, the LANWin share may be Common01\lanwin$) into the ‘Open’ box. Click ‘Ok’.
Find the file called ‘RegComponents.vbe’ and run it. Wait for the prompts to finish.
Find the file called ‘Admin.vbe’ and run it.

Modified -

Known Issues

http://www.symantec.com/business/support/index?page=content&id=TECH163700

Backup Exec Issue

Make sure that Backup exec has been updated to 2010 R3. There is a known issue with previous versions of Backup exec and SEP 12.1. See here for more details:  http://www.symantec.com/business/support/index?page=content&id=TECH162065

Step 1 – Backup the Database:

(This will take several minutes)
Step 2: Turn off replication (not needed on LogDev Server)
Log on to the SEP management console using username: admin | password: current domain administrator password.

Click the Admin tab and then click the blue Servers tab at the bottom of the pane.


On the Servers tab, in the left pane, expand Local Site, and then expand Replication Partners. For each site that is listed under Replication Partners, right-click the site, and then click Delete. In the Delete Partner prompt, click Yes. Log-off the console, and repeat this procedure at all sites that replicate data.

Step 3: Disable secure communication between the server and the clients

In the SEP management console, click the Clients tab then click the Policies tab at the top of the screen. Now click the General Settings link in the Settings section.

Click the Security Settings tab and then un-tick the Enable secure communication between the management server and clients by using digital certificates for secure communication box.

Step 4: Stop Symantec Endpoint Manager

Click Start->Run->services.msc, find the Symantec Endpoint Protection Manager server and stop it.

Step 5: Install Endpoint Protection Manager 12.1

Extract the installation files to a folder. In this folder, open the SEPM folder. Double click setup.exe.

If you get an error stating that `Symantec EndPoint Protection has detected that there are pending system changes that require a reboot`, go to the following thread to find a solution:  http://www.symantec.com/connect/forums/sep-11-mr1-vista-64-bits-re-installation-fail

Follow the prompts to install SEPM 12.1. Once installation has completed the upgrade wizard will appear.
Step 6: Upgrade Wizard

When prompted to specify server ports, make sure that these ports have been allowed through the firewall.

Follow the prompts and use the supplied settings for the rest of the wizard. Once the wizard if complete you will be presented with the following screen:

Step 7: Activating SEP manager

To activate your copy of SEP manager, download the licence file which was provided in the link sent by Symantec which contained your product serial number.

In SEP manager go to the Admin tab and then click the blue Licencing tab at the bottom of the screen. No click Activate licence.

Choose the I have a Symantec licence file option.

Click the Add file blue link and select the licence file you downloaded earlier.

Review the licence information associated with this licence file and then follow the prompts to finish the wizard. You should finish with a message stating that the licence has been added. The Admin->Licences screen should have changed to reflect the new licence information.

Step 8: Rolling out client to workstations

Log on to the SEP manager.  Click the Admin tab and then the Install packages tab at the bottom of the screen. Now click the Upgrade clients with package link.

The first screen on this wizard tells you that it is used to “Upgrade groups with a new client install package”. Click next and select the appropriate package, depending on the operating system of you clients, you should either select Symantec Endpoint Protection version 12.1 for WIN32BIT or for WIN64BIT.

Select the group you want to apply this upgrade to. For the screenshot below a test group was used to test the rollout.

On the next screen, select the option which specifies to download the package from the management server. Click next and finished. To verify that the package has been set to install – go to the Clients tab, select the group you applied the package to and then click the Install Packages tab.