Installing Symantec AntiVirus 10.x or Symantec Client Security 3.x clients by using a logon script
Situation:
This document gives step-by-step instructions to set up Symantec AntiVirus Corporate Edition 10.x or Symantec Client Security 3.x client logon installation.

Solution:




--------------------------------------------------------------------------------
Before you begin: You must follow additional steps if you use one of the following product versions:
A version of Symantec AntiVirus 10.1 earlier than 10.1.5
A version of Symantec AntiVirus 10.0 later than 10.0.0
A version of Symantec Client Security 3.1 earlier than 3.1.5
A version of Symantec Security 3.0 later than 3.0.0
For details, read Client logon script installations fail after you install or migrate to Symantec AntiVirus 10.0.1 or later.

--------------------------------------------------------------------------------


This document explains how to automate a default installation of the Symantec Client Security or Symantec AntiVirus client by using the logon scripts that the server installation program copies to the NetWare and Windows 2003/2000 Active Directory server.

When Windows networks use a logon script, they must be configured to use a domain. When users that are configured to run the script log on to a protected server, the script calls a program to check the version of the client. If the client version on the server is newer than the client version on the user's computer, or if the client is not installed on the user's computer, then the script calls the client installation program. You can set options either to force the client installation or to ask the user to run the installation.


--------------------------------------------------------------------------------
Notes:
To use the logon script installation method, users must log on to the computer by using an account with local Administrator privileges.
Windows NT 4.0 PDC or BDC servers are not supported for Symantec AntiVirus 10 server logon script installations.

--------------------------------------------------------------------------------

Associate users with the logon script
To install Symantec AntiVirus or Symantec Client Security with the logon script, you must specify which users should run the script. Follow the directions for your operating system.

To associate users with the logon script for NetWare
For each user that is to receive a logon client installation, add that user to the SymantecAntiVirusUser group.


--------------------------------------------------------------------------------
Note: This section assumes that users of NetWare 5.1 and 6.x servers use NDS, and that users log on to NDS. In those instances, Symantec AntiVirus server must have been installed to NDS and not to Bindery. While Symantec AntiVirus can protect a server that is installed to Bindery, the client logon script installation option is not supported in a Bindery installation.

If you are not sure that you installed to NDS, or if you need help installing to NDS, read the document How to "walk the tree" when installing Symantec AntiVirus Corporate Edition to NetWare servers.

--------------------------------------------------------------------------------

To add a user to a group in NetWare 5.x or 6.x
On a client, start the NetWare Administrator utility (Nwadmin32.exe or ConsoleOne).
Double-click the SymantecAntiVirusUser group.
In the Group dialog box, click Members.
Click Add to add a user to the group.
Select the user that you want to add, and then click OK.
Click OK to close the Group dialog box.
The user is added to the SymantecAntiVirusUser group. The configured logon installation or logon scan occurs the next time that the user logs on.
Exit the NetWare Administrator utility.


--------------------------------------------------------------------------------
Note: For the logon script to work, users must be located in the same container where the SymantecAntiVirusUser group is located.

--------------------------------------------------------------------------------

To associate users with the logon script for Windows Active Directory server
Copy the Vplogon.bat and Nbpshpop.exe files from the \Program Files\Symantec AntiVirus\logon folder on the Symantec AntiVirus server to the Netlogon share.
By default, the Netlogon share is in the following folder:

C:\WINNT\SYSVOL\sysvol\<domainname>\SCRIPTS

Note the following:
If the Netlogon share has changed, then you must copy the files to the custom directory that you set up as the Netlogon share.
The Symantec AntiVirus server that generates the Vplogon.bat script is the parent server for clients that are installed by that script. For example, if you copy the Vplogon.bat from server A to the Netlogon share, the clients report to server A as their parent.
To install the Symantec AntiVirus client successfully, users that run the logon script must have local Administrator privileges.


On the Windows taskbar, click Start > Programs > Administrative Tools > Active Directory Users and Computers > Users.
In the right pane, double-click the user name that will receive a client logon installation.
On the Profile tab, in the Logon Script box of the User Profile, type vplogon.bat
On the Member Of tab, add the Administrators group if it is not present.
Click OK.
Close the Active Directory Users and Computers dialog box.

After you associate a user with the logon script, that user will install Symantec AntiVirus when the computer is restarted.


Specify installation options that are managed by a Windows Active Directory server

To specify installation options
On the primary server, in the Windows registry, go to the following key:

HKEY_LOCAL_MACHINE\Software\Intel\LANDesk\VirusProtect6\CurrentVersion\LoginOptions


Right-click DoInstallOnwinNT, and then click Modify.
Change the value to one of the following text strings:
FORCE
User has no option to cancel the installation at logon.
OPTIONAL
User clicks Yes or No to receive the installation at logon.
NONE
No changes are made to the client computer at logon.

Click OK, and close the Registry Editor.
On the Windows taskbar, click Start > Run.
In the Run dialog box, type Services.msc
Restart the following services:
Symantec System Center Discovery Service
Symantec AntiVirus

After the services restart, the Vp_login.ini file is updated to reflect the change that you made in step 3. You cannot make these changes by editing the Vp_login.ini file directly, as in previous versions of Symantec AntiVirus. The Vp_login.ini file is automatically changed to match the registry values.


Specify installation options that are managed by a NetWare Server
To specify whether the client computers restart automatically after installation, specify the user restart options in the server registry.


--------------------------------------------------------------------------------
Note: If you installed Symantec AntiVirus 10.0.1, instead follow the directions in the document Client logon script installations fail after you install or migrate to Symantec AntiVirus 10.0.1.1000 MR1 on NetWare.

--------------------------------------------------------------------------------


To specify installation options
At the NetWare system console, load Vpregedt.nlm and go to the following key:

VirusProtect6\LoginOptions


Press E to Edit, select the DoInstallOnwinNT value, and press Enter to open the value.
Change the Data to one of the following text strings and hit Enter to save change.
FORCE
User has no option to cancel the installation at logon.
OPTIONAL
User clicks Yes or No to receive the installation at logon.
NONE
No changes are made to the client computer at logon.

Exit Vpregedt.
From the NetWare console, unload Symantec AntiVirus server by pressing F10.
Reload Symantec AntiVirus by using the following command:

load sys:sav\vpstart

After the Symantec AntiVirus server restarts, the Vp_login.ini file is updated to reflect the change that you made in step 3. You cannot make these changes by editing the Vp_login.ini file directly, as in previous versions of Symantec AntiVirus. The Vp_login.ini file is automatically changed to match the registry values.




Please type your comments here
                                                                                   

RATE THIS SOLUTION
Was this solution helpful to you?
Yes
No

If any information was unclear, or the information you were seeking was not provided, please let us know. Your feedback will help us improve this service.
NOTE: Comments entered here will NOT recieve a personal email response.


Document ID: 2005050406414048
Last Modified: 2006-10-11
Date Created: 2005-05-04
Operating System(s): Windows 2000, Windows XP Professional Edition, NetWare 5.1, NetWare 6.0, NetWare 6.5, Windows Server 2003 32-bit Edition
Product(s): Symantec AntiVirus Corporate Edition 10.0, Symantec Client Security 3.0, Symantec AntiVirus 10.1, Symantec Client Security 3.1