Install ATP module via MDT/SCCM

[Former Member]

I have been in trouble for some time how to install module ATP in "silent mode". (I did not find any switch that would work.)

I need it for MTD/SCCM in tasksequence, others modules no problem install it like:

Agent: Framepkg.exe /INTSALL=AGENT /SILETNT

ENS: setupEP.exe ADDLOCAL="tp,fw,wc"

DXL agent: dxlsetup.exe /install /quiet /norestart

and

ATP: setupATP.exe /???????  (I tried installing it without switches, but every time end task show error 1603.)

Is there any option to install that module via MDT/SCCM?

Thank you

[wouterr]

setupATP.exe without installation switches should be working for doing a silent deployment trough SCCM

[Former Member]

Nope, will display an error at the end of the task 1603/16030. (As I've already written.)

[kfordham281]

When looking in the McAfee download portal the only ATP package I see is the one for ePO deployment. Software Manager doesn't show me a stand alone installer either. This is version 10.5.3.

I have setup automatic tagging in ePO so that devices with ENS will pick up ATP usually within 24-36 hours. We only recently put ENS in MDT and had to overcome this shortcoming. I'm not sure why there is no stand alone installer.

[Former Member · Accepted solution]

To solve this problem I have created a bat file with 5 lines. I put this bat file in the same folder as the SetupATP.exe in the Applications folder of my task sequence and modified the installation of this application to execute the bat file directly.

echo off

net use M: "\\MDTSERVER\W10_1803_Deploy$\Applications"
md c:\temp\ATP
xcopy "M:\Mcafee ATP 10.5.4" c:\TEMP\ATP /s /c /y
c:\temp\ATP\setupATP.exe

With this configuration, the installation was successful without any errors.

When i finished all installations i delete c:\TEMP folder.

[nashcoop]

I've been having the same issue, unable to get ATP to deploy via MDT/SCCM.  I create the design package using the instructions provided in KB86438.  It says to reference the setupATP.exe, and then "Choose the applicable Adaptive Threat Protection installer .zip file package."  The package always successfully gets built, and then I provide it to our MDT/SCCM manager but ATP never installs.  Just the ENS platform and Threat Prevention.  I've had this issue with each version of the design package that has been released since March 2017.  ATP never installs.  I'm not sure what I could be doing wrong, but the problem would be solved fairly easily if McAfee provided a standalone install of ATP.  The issue is very frustrating.  Has anybody had success including ATP with the ENS Design Package when using MDT/SCCM??  Screenshots provided below of the package.

 

[jess_arman]

@nashcoop The likely reason for this failure is that ATP has had issues installing with the current version of the Endpoint Security Package Designer. In its current offering ATP is not included in the mainline ENS distribution, but is categorized somewhat separately. This is changing with the release of ENS 10.7 (ATP will be included) and development is currently working on a the issue, and the next release should correct the issue ATP.
I apologize for the inconvenience that is caused by this situation, but it is likely the reason why you're experiencing issues.

Was my reply helpful?

If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?

[nashcoop]

While I'm glad that ATP will be included with ENS 10.7, are there any plans to update KB86438?  The information in that KB is entirely misleading since it provides detailed instructions for including ATP in the ENS Package Designer.  Also, the problem I've had isn't applicable to only the current version of ENS Package Designer.  I've been using ENS and the Package Designer since version 10.5.1 and run into the same issue.  ATP is permitted to install using the Package Designer, but that package is deployed to a new image using MDT/SCCM only the ENS Platform and Threat Prevention successfully install.  KB86438 should be updated so more people are not mislead by the information provided there.

[jess_arman]

@nashcoop I've done a bit further follow up on the ATP + ENS Package Designer issue as I had remembered it through the hustle and bustle of the holidays etc, and found that I was a bit heavy handed in my delivery of the issue that was found and being worked on with the tool---it is not that it is unsupported, but that there was a definite issue that was found with the transforms within ATP that originally brought into question the supportability of ATP with the tool in the minds of those filing the issue.

I found the defect and it is clearly stated that there will need to be a change to bootstrapper code in order to resolve the issue that was filed, and the current recommendation is to install ATP separately as a work around. This is being tracked in BZ1262682.

If you would like, you're welcome to open a support case to confirm if the same issue is occurring with the 10.6.1 Dec Update packages you're attempting to use in your environment, and potentially a child defect could be filed. It would be worth investigating to confirm if both are the same issue.

Sorry I mislead you based on a slightly foggy remembrance of the issue. Since that was the case though, the KB would not need to be changed much as the instructions are accurate. We're discussing putting a note or known issue entry regarding the issue that is being worked on, the parameters for cause, and when the fix should be available to make this more straight forward.

Was my reply helpful?

If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?

[nashcoop]

Thanks for the suggestion.  I'll work with my MDT admin to test this.