|
|
|||||||
I have a script that pushes Norton antivirus updates to our users if they have CE, but I would also like to add Nav for Exchange and Norton Email gateway to the script, so I can just log into those servers to update them. Does anyone know how to get kix to detect these servers? |
||||||||
|
|
|||||||
Huh? NAV CE does automatic pattern sharing. Why would you have to script it? |
||||||||
|
|
|||||||
what do you mean automatic pattern sharing? |
||||||||
|
|
|||||||
The parent server will automatically push out its pattern file to all the managed clients within minutes of getting the update. All this without users having to logoff/logon or run any script. The only script I am running is to update the parent server more often than what CE offers out of the box. |
||||||||
|
|
|||||||
We don't have the resources here to implement a antivirus server. That's why its pushed through a script. |
||||||||
|
|
|||||||
resources? just kick it in an old pentium MMX 166MHz and you are set. |
||||||||
|
|
|||||||
eh, i kinda like the way it is now. all i have to do is throw the new definitions in a folder when they come out. we're not allowed to use live update here either, so why go through the trouble if i'm just going to have to update it manually all the time anyways? I figured out how to tell if exchange is loaded, now i just need to be able to tell if NAV for email gateways is installed. |
||||||||
|
|
|||||||
we dont have any old MMX 166MHz laying around here anyways... |
||||||||
|
|
|||||||
weird company. we have even 386 machines. and my office is full of shit that does not work. like zip and jaz drives. I quess some would if anyone would be interested to even try to use that kinda crap. |
||||||||
|
|
|||||||
our network hasn't been around all that long. since april of this year maybe? we do have zip drives though. I have no idea why since zip cartriges and floppies don't last more than a few uses here in the desert. [ 21. September 2003, 07:34: Message edited by: ShiftyGir ] |
||||||||
|
|
|||||||
too good salesmen |
||||||||
|
|
|||||||
lol, i guess so. its not my money going into useless crap, so i dont care. |
||||||||
|
|
|||||||
Now, explain that to me. Do do have the licenses for NAVCE, but you do not install the server component on even one computer? What's the reason to buy NAVCE in the first place then? The requirements for the server component of NAVCE are not that high. Additionally, when using the Liveupdate Administrator Utility, you can point your computers to a local location for AV update purposes. |
||||||||
|
|
|||||||
If you're running liveupdate and you're not using the vdtm method (automatic push) you can download the i32 or x86 file from symantec's ftp site and set up an automatic task on your exchange server to run it... That way it'll get defs daily... L8tr... |
||||||||
|
|
|||||||
first, we have kindof like a business wide license for CE. (We're set up all over the world). The reason we don't a server isn't set up is because we don't have extra servers/workstations for it. We're not allowed to use liveupdate at all. Our NOSC(Network Operations Support Cell) has to test and validate definitions before we can use them. even if we wanted to sneak around and set up getting the files from symantec's ftp server, we would have to send a firewall request to our NOSC asking them to open the port on Sidewinder for that specific machine to symantec, which would let them know that we were trying to set up liveupdate.(We don't have control of our firewall) I also want to add that Baghdad sucks... in case you wanted to know |
||||||||
|
|
|||||||
First off, the NAV Parent server doesn't need much, and certainly doesn't need a dedicated server. Mine runs on a 233 Mhz and doubles as a RAS server. Secondly, you don't have to use live update for pattern sharing. You can do manual updates. By pattern sharing, you can push out the pattern to every machine in minutes without requiring any of the machines to run a logon script or reboot. |
||||||||
|
|
|||||||
It sounds like your NOSC is in control of getting defs and testing them. Why not let them figure out how to push them to clients? |
||||||||
|
|
|||||||
They have us push them out through scripts. I'm just trying to be lazy and have the script update our Email Gateway when i log into it. |
||||||||
|
|
|||||||
Very, very strange |
||||||||
|
|
|||||||
I understood what you said about the way you push out defs, but it'd be soooooooooo much easier to update one server and have it push out defs to your clients.... L8tr... |
||||||||
|
|
|||||||
well... I have heard the term Military Intelligence and oxymoron used in the same sentence. |
||||||||
|
|
|||||||
yea, tell me about it, i'm living it right now. I guess the NOSC has been reading this thread or something because they sent a team to install a SAV 8.1 server. Now, the problem is how to get the script to update the current NAV 7.whatever to SAV 8.1. I used the following script to try it. setl "SU_DOMAIN=@domain" setl "SU_PASSWORD=***" use t: /del use t: "\\bdab-lu-n\vplogon shell '%comspec% /c su bleh "t:\vp_log32 /p=t:"' use t: /del Then I get a Program Error saying Setup.exe has generated errors and will be closed by Windows. You will need to restart the program. An error log is being created. I know it's not a scripting error, because it does the same exact thing when i try to su manually. Is there any other way to use kix to do this? I already tried just su the vplogon.bat, and it doesn't even get as far as the kix version did. And yes, I did use kixcrypt to encrypt the script. [ 23. October 2003, 11:42: Message edited by: ShiftyGir ] |
||||||||
|
|
|||||||
I knew Saudi sucked, there has to be a whole other level of suckiness for Baghdad... but it has to be better than Afghanistan. of course, there probably isn't every bored schmuck from 4 countries wandering through Afghanistan with a weapon looking for something green to blow up... So Baghdad may indeed be worse than that. The only action I saw was the day they opened a new omelette line in the AF chow hall at Eskan Village |
||||||||
|
|
|||||||
See the FAQ Forum under Installing an Application as an Admin . Build unattended install SAV CE 8.1 client package via Symantec Packager Enumerate to domain via NetView2() for each computer Remotely check for SAV CE version If SAV CE < 8.1 Schedule task on remote client to run SAV CE 8.1 update script under admin account Have script reboot remote client after install finished endif next [ 23. October 2003, 19:10: Message edited by: sealeopard ] |
||||||||
|
|
|||||||
You can also set the package to reboot the workstation after the installation instead of doing it from a script... L8tr... |
||||||||
|
|
|||||||
Which can cause problems due to the KiXtart resilience to getting killed. In my experience, it's better to not reboot through the packages but to have kiXtart itself issue a reboot command with a 30 second delay. |