Packaging ePO agent and VSE 8.7i for imaging multiple computers

[Former Member]

I have packaged the ePolicy Agent 4.5 and it communicates with the server just fine.  I was wondering if anyone knew of a way to package the agent and VSE 8.7i  so the computer would not be vunerable during the time that it updates from the Client Task Scheduler.  I have packaged them both but VSE 8.7i does not update until the Client Task is scheduled to run.  I have found a work around and it is deploying VSE 8.7i through an image first and then deploying ePolicy Agent 4.5 after that, the down fall to this is that I have to click on the McAfee Agent Monitor and enforce the policy to run or wait until it is scheduled to run.  I am using Altiris to image the new computers.  Thanks for the help.

[apoling]

Hi,

This may work:

use McAfee Installaton Designer 8.7 and a current copy of framepkg.exe that you obtained from ePO Master repository to produce a custom VirusScan installation package.

(ID 8.7 has an option to embed framepkg.exe as well as any VSE patch, new DAT, etc.)

Edit VirusScan AutoUpdate task schedule in ID so that it updates "when Idle" or "At Logon", etc.

Check the box near the end during ID configuration that says: "Update VirusScan Enterprise at the end of installation".

Use this custom VirusScan install set when preparing your image.

When you install VirusScan onto the image workstation/server, VirusScan will update itself due to the checkbox above and due to the valid sitelist that framepkg.exe has within. If you burn the image later on workstations, standard AutUpdate updates according to the setting above. When MA enforces ePO update task, that one will update.

Do not forget to delete AgentGUID regkey after VirusScan installation as the very last step in image preparation.

NB: Installation Designer must be run on a host that has Virusscan Enterprise 8.7 installed and managed.

Attila

[JoeBidgood]

This won't work, I'm afraid. It used to work with CMA 3.6, but MA4 and above are MSI packages, as is VSE - and the MSI won't allow two packages to run at the same time, so you can't call an MSI install from inside another.

I think there used to be an article about this but I can't find it at the moment - I'll see if I can track it down.

Regards -

Joe

[Former Member]

In your Altiris package you can add a command line execute to force the agent to wake up and check in at the end of the install.

<agent install directory>\cmdagent /p /e /c

We run this to force the agent to wake up and get all its policies immediately after the install of each mcafee product (siteadvisor, HIPS, and AV). Seems to work fine.