[RyanVM]

jbourgui, on Sep 14 2004, 07:54 PM, said:

RyanVM, on Sep 12 2004, 06:46 PM, said:

Does anybody know how to change LiveUpdate settings so it's installed with them in place?

.....

Anybody have a clue how to make the settings stick?

ryanvm, check out my post: http://www.msfn.org/board/index.php?showto...20&#entry180255

it details how to change settings for default scan options, scheduled scans, and Live Update settings. it's not an elegant .msi integrated solution, but it works.

-joe

I don't see a setting for Express mode in your post, which is the setting I'm looking for. I'm pretty sure that those settings are controlled in the Settings.LiveUpdate files and not in the registry.

Thanks anyway, though.

[awarberg1]

Hi guys,

I'm administering a small Windows 2003 domain. We are using group policies to install software on our Windows XP clients.

Although it would be possible to install via GPO directly by using the "Symantec AntiVirus.msi" file I would like to make some changes in what is installed. For instance, I dont think our users really need the SAVHelp component...

The "Symantec AntiVirus.msi" file accepts commands from the command line to control what is installed, but as far as I know, it is not possible to issue commands to a GPO installed package.

I have searched the Symantec knowledge base and found this article: Symantec article discussing MST transforms, which suggests creating a MST transform file (we already use a transform file for our Office installation) to make changes to the installation.
So I have become acquainted with Orca, which generates MST files, however, I wouldn't know what to "transform" in the MSI file to make my desired changes appear. Symantec KB doesn't talk about configuring what is installed using MST files.

Have you got any suggestions as to how I might make changes to the installation with GPO distribution in mind?

Thank you.

Best regards
Andreas

[RyanVM]

I'm not familiar with making MST files in Orca, but you could edit the MSI file it WinINSTALL LE easily enough and remove the sections you don't want installed.

[awarberg1]

Hi Ryan,

This is great! I am able to define what is to be installed.

Do you know if it is possible to configure the virus definition update interval through wininstall le 2003?

Regards, Andreas

[RyanVM]

Yes, look back a couple pages for the registry entries involved in doing it.

From there, just go to the registry section of the MSI file in WinINSTALL LE and have the MSI add those entries.

[r4v3n]

It would be nice if the SAV9 installation guides and all these tips and tricks could be summed up on this page:
http://unattended.ms...cations/sav.htm

[mazin]

Thauzar, on Sep 14 2004, 02:41 PM, said:

but my SAVSource installation folder is 42.5Mb

I think you want to compress SAV91400 not SAVSource!

[Nilfred]

I was doing this for some time:
$oem$\Prog$\Symantec\Liveupdate\Settings.Merge.LiveUpdate

Quote

PREFERENCES\CORPORATE_MODE=YES
PREFERENCES\ALL TRANSPORTS AVAILABLE=YES

$oem$\Prog$\Symantec\Liveupdate\Settings.Host.LiveUpdate

Quote

HOSTS\0\ACCESS=D:\Av\LiveUpdate
HOSTS\0\ACCESS2=D:\Av\LiveUpdate
HOSTS\0\IS_SYMANTEC=NO
HOSTS\0\NAME=Buscando actualizaciones en unidad de CD-ROM D:...
HOSTS\0\LOGIN=nologinrequired
HOSTS\0\PASSWORD=nopassword
HOSTS\0\SUBNET=0.0.0.0
HOSTS\0\SUBNETMASK=0.0.0.0
HOSTS\0\TYPE=LAN
HOSTS\1\ACCESS=E:\Av\LiveUpdate
HOSTS\1\ACCESS2=E:\Av\LiveUpdate
HOSTS\1\IS_SYMANTEC=NO
HOSTS\1\NAME=Buscando actualizaciones en unidad de CD-ROM E:...
HOSTS\1\LOGIN=nologinrequired
HOSTS\1\PASSWORD=nopassword
HOSTS\1\SUBNET=0.0.0.0
HOSTS\1\SUBNETMASK=0.0.0.0
HOSTS\1\TYPE=LAN
HOSTS\2\ACCESS=liveupdate.symantecliveupdate.com
HOSTS\2\ACCESS2=http://liveupdate.symantecliveupdate.com
HOSTS\2\IS_SYMANTEC:ENC=N%9-U,&[>@M
HOSTS\2\LOGIN:ENC=YBR#A%5\(CI
HOSTS\2\NAME=liveupdate.symantecliveupdate.com
HOSTS\2\PASSWORD:ENC=YBR#A%5\(CI
HOSTS\2\SUBNET=0.0.0.0
HOSTS\2\SUBNETMASK=0.0.0.0
HOSTS\2\TYPE=HTTP
HOSTS\3\ACCESS=liveupdate.symantec.com
HOSTS\3\ACCESS2=http://liveupdate.symantec.com
HOSTS\3\IS_SYMANTEC:ENC=N%9-U,&[>@M
HOSTS\3\LOGIN:ENC=YBR#A%5\(CI
HOSTS\3\NAME=liveupdate.symantec.com
HOSTS\3\PASSWORD:ENC=YBR#A%5\(CI
HOSTS\3\SUBNET=0.0.0.0
HOSTS\3\SUBNETMASK=0.0.0.0
HOSTS\3\TYPE=HTTP
HOSTS\4\ACCESS=update.symantec.com/opt/content/onramp
HOSTS\4\ACCESS2=ftp://update.symantec.com/opt/content/onramp
HOSTS\4\IS_SYMANTEC:ENC=N%9-U,&[>@M
HOSTS\4\LOGIN:ENC=V!0QDU7."^$C(%+!24M?+A
HOSTS\4\NAME=update.symantec.com
HOSTS\4\PASSWORD:ENC=L"`';1^I=[DC(%+!24M?+A
HOSTS\4\SUBNET=0.0.0.0
HOSTS\4\SUBNETMASK=0.0.0.0
HOSTS\4\TYPE=FTP
HOSTS\NUM_HOSTS=5

These settings merge at first Liveupdate run into:
"c:\Documents and Settings\All Users\Datos de programa\Symantec\LiveUpdate\Settings.LiveUpdate"
So Liveupdate scan CD for virus def. an other stuff. In facts download:
livetri.zip
symtri.zip
And scan for needed stuff.
I use Liveupdate Administration to keep track of updates, but its 120 Mb of downloads actually, because I used for all Symantec producs.
To slim down the needed updates I peek at:
"c:\Documents and Settings\All Users\Datos de programa\Symantec\LiveUpdate\Log.LiveUpdate"
There is where all the Liveupdate process is logged. So you must first download the requires files to put in the cd:
livetri.zip
symtri.zip
With these files in the "Host file" path, launch Liveupdate: It will recognize the needed updates but fail to download them. But you will get the errors in the log file:

Quote

22/08/04, 00:10:57 a.m. GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - ERROR! - URL: "D:\Instalar\Aplicaciones\Nav2002\LiveUpdate\ennfullb.x86", Full Download Path: "C:\WINDOWS\All Users\Datos de programa\Symantec\LiveUpdate\Downloads\ennfullb.x86" HR: 0x802A0033
22/08/04, 00:10:57 a.m. GMT -> HR 0x802A0033 DECODE: E_CANT_CREATE_FILE

The paths in the example abobe may differ from the host file presented before (should be the same) because is really a log for a NAV2002 update, but you get the idea:
"The files marked with ERROR! should be downloaded from the symantec server"
So for the example abobe you may also download:
http://liveupdate.sy...om/ennfullb.x86
(between other files)
The full update process may require you restart and launch Liveupdate again to get all the updates, so you must repeat the "LiveUpdate Error->Log peek->Download->LiveUpdate Success-Restart"
I personally switch to Liveupdate Administration (hacked*) because is easier to mantain the updates.

Nilfred -)

*The hack consist in a read only and modified products.xml to add the files I need which are not dowloaded by itself.

[RogueSpear]

Been a lurker for about a week now and for the life of me, I have no idea how this site has escaped my attention for so long. Sort of feel like I'm crashin a party here.

Well I just read all 21 pages of this thread, and I hope I didn't miss this, but here goes:

On the distribution CD in the unsupported tools area (where Packager can be found), is a directory called ConfigEd. In there is a little utility where you can generate a GRC.DAT file with all of your desired SAV settings. Place this file in the root of your installation point of SAV and all those settings will be imported into the client at install.

Anyone know if there is a seperate thread for SCS (SAV and the Firewall Client)? Or is this thread open for that discussion too?

[jbourgui]

RogueSpear, on Sep 18 2004, 07:52 PM, said:

Sort of feel like I'm crashin a party here.

hey, don't feel like you're crashing a party at all! for your first post, you nailed it! Using that config util is a MUCH easier and more elegant solution than the registry hack that I came up with.. new blood is always welcome!

-joe

[smc1979]

From what I have found on there website sav 9 is up to version 9.0.1.1000

Does anybody know if this is worth updating to?

[1chaoticadult]

Actually its up to 9.0.1.1100. Yes its worth updating. That version is Windows SP2 compatible.

[mazin]

I installed XP SP2 and had no problems with 9.0.0.1400, either. However, updates are always required. Is there a patch for 9.0.1.1100, yet?

[RyanVM]

drthawhizkid, on Sep 23 2004, 11:48 AM, said:

Actually its up to 9.0.1.1100. Yes its worth updating.  That version is Windows SP2 compatible.

I haven't found any indication of any version above 9.0.1.1000. Any links to the patch?

[prathapml]

@RyanVM & mazin
No patches, and may not be either (coz of the massive extent to which v9.0 got pirated)! Gotta get it direct through sales channels (as of now, atleast ).

@smc1979
If you already have 9.0 slip-streamed to include the latest patch, then don't worry about 9.0.1. It has (almost) the same patch, which permanently uses (additional) 5 MB of memory just for the sake of tying in with the Windows Security Center. Is that good or bad, I leave it to you to decide.


@RogueSpear

Quote

Anyone know if there is a seperate thread for SCS (SAV and the Firewall Client)? Or is this thread open for that discussion too?

There ain't any separate thread existing for SCS. This thread welcomes that discussion as well.

[mazin]

prathapml, on Sep 24 2004, 01:56 AM, said:

Gotta get it direct through sales channels (as of now, atleast ).

I'm not in a hurry!

Thanks for no-patches confirmation.

[Feltel]

I was able to automatically install SAV 9.0 Corporate as described under http://www.msfn.org/board/index.php?showto...ndpost&p=164316 (SAV v9.0.0.1400 and LiveUpdate v2.5.55.0) but now everytime I start the Computer a Explorer window pops off which shows the content of "c:\Progra~1\Symantec". Closing it is not the problem but the next time I boot the computer the window reappears.

The Computer is running German XP Pro SP2

How to solve this?

Thanks
Sebastian

[mazin]

I can only support this method: http://www.msfn.org/board/index.php?showto...ndpost&p=179948

[r4v3n]

Quote

everytime I start the Computer a Explorer window pops off which shows the content of "c:\Progra~1\Symantec".

This is usually because you have a bad shortcut in
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
or
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

which is not found. Try all the shortcuts in there and see if any of them is bad, e.g. paste the path in Explorer and remove the filename to see if you end up in an existing folder.

Also check your Startup/Autostart folder or whatever it is called in german windows. Else do as the professionals, always run english version of Windows. If you don't understand the english GUI then you can always put in a german MUI on the english install.

[RyanVM]

For the record, the version floating around as "9.0.1.1100" is actually 9.0.1.1000 (as I thought). That's the way it shows up within SAV. People were probably confused because some file versions do show as 9.0.1.1100, but the overall program version is still 9.0.1.1000.

For the record