Symantec官方在AD域环境使用组策略分发SAV10 x客户端.doc

SymantecADSAV10.1 Question/Issue: This document describes how to install Symantec AntiVirus 10.x by using a Active Directory Group Policy Object in Windows 2003/2000.Symptoms: Installing Symantec AntiVirus 10.x using a Group Policy Object (GPO) installation This document describes how to install Symantec AntiVirus 10.x by using a Active Directory Group Policy Object in Windows 2003/2000. Solution:-Before you begin: This procedure works only with Symantec AntiVirus installations or upgrades. It does not work with Symantec Client Security. Symantec AntiVirus cannot be added to a software installation Group Policy Object for Active Directory Deployment if the same version of Symantec AntiVirus is already installed. Confirm that your DNS server is set up correctly. The correct setup is very important because Active Directory relies heavily on your DNS server for computer communication. To test the setup, from a client computer that has joined the domain, try to ping the Windows 2003/2000 Active Directory computer, and then ping in the opposite direction. (Use the fully qualified domain name; the use of the computer name alone does not call for a new DNS lookup.) Use the following format:ping -To install Symantec AntiVirus using a Windows 2003/2000 Active Directory Group Policy Object From a Windows 2003/2000 Active Directory computer, share the WIN32 folder from the Symantec AntiVirus server installation that is in the following location:Program FilesSAVSymantec AntiVirusCLT-INSTWIN32If Symantec AntiVirus client is installed on the Windows server, copy the Win32 folder from a Symantec AntiVirus primary or secondary server to a location on the Windows 2003/2000 Active Directory computer, and then share the folder.On the Windows Taskbar, click Start Programs Administrative Tools Active Directory Users and Computers. In the console tree, right-click the organizational unit to which you plan to deploy clients, and then click Properties. On the Group Policy tab, click New to create a specific policy. Type the following as the new policy name:Elevated Group PolicyClick Elevated Group Policy, and then click Edit. Under the Computer Configuration, expand Software Settings. Right-click Software installation, and then click New Package. In the Open dialog box, type the Universal Naming Convention (UNC) path to the shared WIN32 folder that contains the MSI package.Do not browse to the location. Be sure that you use the UNC path to the shared folder, as in the following example:WIN32Symantec AntiVirus.msiClick the Symantec AntiVirus.msi file, and then click Open. Click Assigned, and then click OK.The package is listed in the right pane of the Group Policy window. Under Computer Configuration, expand Administrative Templates Windows Components. Click Windows Installer. In the right pane, double-click Always install with elevated privileges. Check Enable. If the option is present, check Check to force setting on; uncheck to force setting off.Some organizational units may not show this option. Click Apply, and then click OK. Close the Group Policy window, and then click Close or OK. Close Active Directory Users and Computers. To apply the changes, on the Windows taskbar, click Start Run. In the Open box, do one of the following: In Windows 2003, type the following text:gpupdate /forceIn Windows 2000, type the following text:secedit /refreshpolicy machine_policyClick OK.When the client computer starts, the Symantec AntiVirus client softwar