+ Post New Thread
Results 1 to 9 of 9
Enterprise Software Thread, Deploying System Center 2012 Endpoint Protection in Technical; ...
  1. #1
    kaphc's Avatar
    Join Date
    Sep 2009
    Location
    Derbyshire
    Posts
    592
    Thank Post
    155
    Thanked 81 Times in 68 Posts
    Rep Power
    76

    Deploying System Center 2012 Endpoint Protection

    Having just discovered that as a school we are licensed to use System Center 2012 under the terms of our EES, we would like to deploy it (it'll save us about £500 a year so well worth it). It's a small primary school with about 150 kids and about 116workstations.

    I'm now trying to work out what we will need to do to move from Symantec Endpoint Protection onto the System Center 2012Endpoint Protection. I know there are lots of guides out there but what I'm not clear on is this: Which software sits on the server to control all the clients? Is it System Center Configuration Manager I need to install or System Center Services Manager?

    We will be running this on a Windows Server 2008 R2 and it's the sole server so I don't have a test environment and need to get this right first time! It has SQL Server 2005 already installed - will this need to be upgraded and if so will this be done as part of the System Center install or do I need to look into this separately?

    Finally I'm thinking that we will need to deploy SCEP and then uninstall Symantec EP so that we have continued A/V coverage. Does that sound like a sensible order to do this in?

    Thanks in advance to anyone who can help me figure this out!

  2. #2
    mrbios's Avatar
    Join Date
    Jun 2007
    Location
    Stroud, Gloucestershire
    Posts
    2,659
    Thank Post
    383
    Thanked 273 Times in 225 Posts
    Rep Power
    103
    EDIT: removed what i put here originally, i was wrong: you can deploy endpoint protection standalone without the need for SCCM. I'd say SCCM is overkill for the amount of PCs you're talking here though, but if you feel it's worth it then by all means....

    SCSM you don't need, that's like an organisational central management system, separate to what you're after.
    Last edited by mrbios; 9th May 2013 at 04:47 PM.

  3. #3

    Join Date
    Mar 2013
    Location
    west sussex
    Posts
    519
    Thank Post
    74
    Thanked 26 Times in 26 Posts
    Rep Power
    15
    I would use SCCM (At that price) for 10 workstations, just to automate the build process if nothing else.

  4. #4
    kaphc's Avatar
    Join Date
    Sep 2009
    Location
    Derbyshire
    Posts
    592
    Thank Post
    155
    Thanked 81 Times in 68 Posts
    Rep Power
    76
    Sorry, just to clarify as I didn't leave a space in the right place in my original post ... there's 116 workstations (90 of them netbooks).

    If I deploy SCEP standalone is there any way of managing it centrally from the server to check for version installs, run reports of at risk computers etc? (Like Symantec Endpoint Protection Manager)?

  5. #5
    Modey's Avatar
    Join Date
    Oct 2007
    Location
    Northants
    Posts
    140
    Thank Post
    16
    Thanked 31 Times in 26 Posts
    Rep Power
    20
    There did used to be this the FEP 2012 client :- http://lms.truesec.se/

    Not sure how up to date it is though or if it supports the new 2012 client.

  6. #6
    MartinT's Avatar
    Join Date
    Jul 2007
    Location
    Ascot
    Posts
    193
    Thank Post
    20
    Thanked 12 Times in 12 Posts
    Rep Power
    18
    I'd go with SCCM. It's what I'm doing right now and I'll save about £1,000 per annum on AVG licencing for 160 workstations/laptops.

    I have a time limit: I must get it going and fully deployed by the end of the month in order to cut-over from the expiring AVG.

  7. #7

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,532
    Thank Post
    1,341
    Thanked 470 Times in 307 Posts
    Blog Entries
    6
    Rep Power
    200
    Ive gone with SCCM and Endpoint protection, and Im going to hijack your thread if I may

    Im looking to create a container which will show which computers dont have the SCEP installed. Using this page Subselect queries the easy way - Jeff Gilbert's Web blog at myITforum.com I have created the following:

    Code:
    select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.ResourceId not in (select SMS_R_System.ResourceId from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName = "System Center 2012 Endpoint Protection")
    But it doesn't seem to work; what bit have I done wrong please

  8. #8

    Join Date
    Nov 2011
    Posts
    35
    Thank Post
    0
    Thanked 5 Times in 4 Posts
    Rep Power
    7
    We are using SCCM 2012 and under monitoring > endpoint protection > lower right hand pane there is a link which will take you directly to a list of clients which do not report as having FEP installed/functioning.

  9. Thanks to forrager from:

    RabbieBurns (13th May 2013)

  10. #9

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,532
    Thank Post
    1,341
    Thanked 470 Times in 307 Posts
    Blog Entries
    6
    Rep Power
    200
    well that's just a tad easier than what I was attempting. Thanks



SHARE:
+ Post New Thread

Similar Threads

  1. System Center 2012 - Client Deployment
    By cmorgan in forum Enterprise Software
    Replies: 20
    Last Post: 19th September 2013, 09:30 PM
  2. Replies: 3
    Last Post: 1st September 2013, 10:37 AM
  3. System Center 2012, operating system deployment
    By ful56_uk in forum Enterprise Software
    Replies: 1
    Last Post: 4th February 2013, 05:09 PM
  4. Microsoft System Center 2012
    By Eben in forum Enterprise Software
    Replies: 6
    Last Post: 5th April 2012, 12:35 PM
  5. All System Center 2012 products to be released ONLY as a single suite
    By AngryTechnician in forum Enterprise Software
    Replies: 15
    Last Post: 26th January 2012, 02:03 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •