McAfee EPO and Thin Clients
We have a small problem which I hope someone can shine a light on.
We use McAfee EPolicy Orchestrator to distribute our virus solution around the school. however Virusscan 8 kills the new thin client network machines better than the off switch. So we want to prevent EPO from distributing and installing the virusscan software .........
And there is the problem
If we add the machines to the domain the EPO runs hourly and distributes it payload ......
the machine is slower than a I286 with 256K mem running Win 3.1
Any clues how we can prevent EPO from running on a select group of machines?
Re: McAfee EPO and Thin Clients
I tend to leave EPO to my NM but from memory I thought you could group clients together and set specific instructions (scan times, update checks, etc)?
I am sure you can also tell it what version (if any) to use or run, or whether the service actually runs (the client is installed but does nothing!)
Re: McAfee EPO and Thin Clients
Group those machines in to their own OU within EPO go to policies and uncheck inherit and then modify the policies and tasks as you see fit. Sorry got stacks on so I haven't the time to go into detail. Hope this post makes sense if you need more help I can add more detail later.
Re: McAfee EPO and Thin Clients
In ePO MMC Snap-In you can edit the 'Tasks' at each group.
I have ePO setup pulling AD information. If I had a Thin Client OU I could click on that group and under the 'Tasks' Tab you can edit the inherited values for 'Deployment'.
What you need to do is disable the task, which is at the bottom of the Task pane that comes up. Untick 'Inherit' and the values become active, then untick 'Enable'.
All Tasks can be edited in this way. So for example the scheduled virus scan runs during lunch time on a friday for our workstations, so that they are on. For the Server OU, however, the schedule has been edited so that it runs on a Saturday so as to not impact on performance during the week.
Hope this is what you are looking for! I'm not sure if you have anything different because of Thin Client, which is something I haven't done.