. All right reserved. For more information about Specops Deploy and other Specops products, visit www.specopssoft.com
Copyright and Trademarks Specops Deploy is a trademark owned by Specops Software. All other trademarks used in this document belong to their respective owners. 2
Contents Requirements 6 Installing Specops Deploy / Endpoint Protection 7 Installing the Specops Deploy Server 8 Installing the Administration Tools 9 Installing Specops Reporting 10 Post-installation configuration 11 3
About Specops Deploy / Endpoint Protection Specops Deploy / Endpoint Protection integrates Microsoft Forefront/System Center Endpoint Protection with Active Directory and Group Policy. Specops Deploy / Endpoint Protection will allow you to administer the Forefront/System Center Endpoint Protection client through Group Policy, without implementing the full System Center solution. Specops Deploy / Endpoint Protection is a component of the Specops Desktop Management suite. You can learn more about Specops Deploy and other Specops products at www.specopssoft.com. 4
Key components Specops Deploy / Endpoint Protection consists of the following components and does not require any additional servers or resources in your environment. Specops Deploy Server: Creates the Service Connection Points and IFP folder structures. The Specops Deploy Server also processes real-time feedback from the clients, and incoming IFP messages and places them in the Feedback database. Administration Tools: Controls the client from the Active Directory Users and Computers console. Specops Reporting: Creates reports of the data contained in the Specops Deploy / Endpoint Protection feedback database. Specops Deploy Client Side Extension: You can automatically configure an existing Group Policy Object with Software Installation settings to deploy the Client in your domain. Note: The Client Side Extension is a required component for all Deploy products. 5
Requirements Your organization s environment must meet the following system requirements. Item Requirement Specops Deploy Server Windows Server 2003, 2003 R2, 2008, 2012, 2012 R2 Note: This can be an existing server or a dedicated server. This server does not have to be a physical server. It can be a virtual server. Microsoft SQL Server installed Administration Tools MMC 3.0 with Active Directory and Users and Computers snap-in Group Policy Management Console (GPMC) Specops Reporting IIS installed Specops Deploy Client Side Windows XP or later Extension.NET Framework 2.0 or later 6
Installing Specops Deploy / Endpoint Protection During installation, Specops Deploy will launch the Setup Assistant. The Setup Assistant contains installation information for all products from the Specops Deploy suite including Specops Deploy / Endpoint Protection, Specops Deploy / OS, and Specops Deploy / App. You will only need to complete the installation steps for the product you plan on installing. The Setup Assistant will help you install the following components for Specops Deploy / Endpoint Protection: Specops Deploy Server Administration Tools Specops Reporting Specops Deploy Client Side Extension 1. Download the Setup Assistant. 2. Save and Run the Setup Assistant locally to a machine where you administer Group Policy. Note: By default the file is extracted to C:\temp\SpecopsDeploy_Setup_[VersionNumber] 3. Double click Specopssoft.SetupAssistant.exe to launch the Setup Assistant. 4. To begin, click Start Installation in the Specops Setup Assistant dialog box. 7
Installing the Specops Deploy Server Installing the Specops Deploy Server will install the Specops Deploy Database on the local computer. You can install the Specops Deploy Server from the Setup Assistant in the Specops Deploy / App menu. Install the Specops Deploy Server 1. In the main menu, select Specops Deploy Server Setup. 2. Verify that you have fulfilled the prerequisites. If you do not meet the prerequisites, you may need to do the following: a. Verify that you are running a valid operating system. b. Verify that the account being used to run the Setup Assistant has local administrative permissions. 3. Click Select User. 4. Enter the Username and Password of the user account the service will run as, and click OK. Note: All operations performed by the Specops Deploy Server component will be performed in the context of the user account selected here. If you are also installing Specops Deploy / OS, we do not recommend using the same service account. 5. Click Select database to select the SQL Server to install the database on. Note: To find the SQL server, the SQL server browser service must be running. 6. Identify the server(s) you want to install the database on, and click OK. 7. Click Install. 8
Installing the Administration Tools Installing the Administration Tools will install the GPMC snap-in, and the Email Configuration tool. You can use the GPMC snap-in to create Endpoint Protection settings in Group Policy. You can use the Email Configuration tool to configure email settings for the Specops Deploy Server service. The Administration Tools should be installed on the computer that you want to administer the product from. Install the Administration Tools 1. From the Deploy / Endpoint Protection menu, select Administration tools. 2. Click Install. 3. In the Installation succeeded dialog box, click OK. 9
Installing Specops Reporting Specops Reporting will install the web application used to create reports of the data contained in the Specops Deploy / Endpoint Protection feedback database. If Specops Reporting has already been installed as a part of your Specops Inventory or Specops Command installation, you should update your existing version of Specops Reporting rather than installing a fresh copy. Install Specops Reporting 1. In the main menu, select Specops Reporting. 2. Verify that you have fulfilled the prerequisites. If you do not meet the pre-requisites you may need to do the following: a. Verify that you are running a valid operating system. b. Verify that the account being used to run the Setup Assistant has local administrative permissions. c. Verify that IIS is installed. 3. Click Select to identify the website where Specops Reporting will be installed. Note: If there is more than one website running on your IIS, you may select which one you wish to use for the Specops Reporting component. 4. Click Select database.. to identify the SQL server you want to install the database on. 5. Click Install. 10
Post-installation configuration You will need to complete the following post-installation task once you have installed Specops Deploy / Endpoint Protection: 1. Deploy the Specops Deploy Client-Side Extension. 2. Deploy the Forefront/System Center Endpoint Protection client. 3. Configure email settings. 11
Deploy the Specops Deploy Client-Side Extension using Group Policy Software Installation You can automatically configure an existing Group Policy Object with Software Installation settings to deploy the Client in your domain. The Client Side Extension is a required component for all Deploy Products. You can deploy the Client-Side Extension from the Setup Assistant in the Specops Deploy / App menu. 1. Launch the Setup Assistant and click Start Installation from the Specops Deploy / App menu. 2. Click Deploy Specops Deploy Client Side Extension. 3. To select the Group Policy Object that will be used to deploy the client, click Select GPO. You will be given the following options: Option Step Create New GPO Select an existing GPO 1. Click Create New GPO. 2. Enter a new Group Policy Object name. 3. Select the location you want to link the Group Policy object to. 4. Click OK. 1. Select an existing GPO from the list. 2. Select a link for the chosen GPO, and click OK. 4. To install the Client on all computers in your organization you can: Option Step Create a network share on the local computer and copy the Client-side extension package to the new network share Select an existing network share and manually copy the Client-side extension package to the existing network share 1. Click Create Share. 2. Select a local path to create the share for, and click OK. 3. Click Select share. 4. Verify that the network path to the network share you created is correct, and click OK. 1. Click Select Share 2. Browse to the location of the msi-package, and click OK. Note: It is recommended that you use a Distributed File Share (DFS). If DFS is used with load balancing verify that the setup files are copied to all servers before proceeding. 12
5. To create the packages for x86 and x64 deployments in the selected GPO, click Add Settings. 13
Deploy the Forefront/System Center Endpoint Protection client The Forefront/System Center Endpoint Protection client must be installed on your client computers. Specops recommends using Specops Deploy / App to deploy the client. For more information on Deploying Application through Specops Deploy App, see the Specops Deploy / App Administration Guide. 14
Configure email settings The email configuration settings are used to control where and how emails are sent from the system. 1. Open the Specops Deploy / Endpoint Protection Email Configuration Tool. 2. Click Edit. 3. You must specify the following configuration items: a. SMTP Server Name: Specify the FQDN or IP-address of your SMTP server. b. SMTP Port Number: Specify a non-standard port to connect to the server. c. Email Sender Address: Enter the email address that will be used to send email. d. Recipient email address: This is the email address where the notification email will be sent. Multiple recipients can also be configured if the addresses are separated by a semi-color character. 4. Click OK. 15
Support Congratulations! You have successfully installed and configured Specops Deploy / Endpoint Protection. For more information, you can find the Administration Guide at www.specopssoft.com/documentation/specops-deploy-documentation/specops-deployadministration-guide. If you are unable to resolve a product related issue, contact Specops Support for assistance. Online We recommend submitting your case directly on our website at: www.specopssoft.com/support. Telephone International +46 8 465 012 50 Monday - Friday: 09:00-17:00 CET North America +1-877-SPECOPS (773-2677) Monday - Friday: 09:00-17:00 EST 16