Installation of Symantec Endpoint 14.0

Step 1: Download Symantec Endpoint Protection

If you have not received an Order Fulfillment email with your license certificate, contact Symantec Customer Support by phone for further assistance.

1. Go to FileConnect.
2. Type the serial number that you found in your Order Fulfillment email.
   The serial number is case-sensitive.
3. Click Submit Serial Number.
4. Select the appropriate version (based on language), such as Symantec Endpoint Protection 14 - International English.
5. Click the plus sign (+) next to a file name to expand the information about it. The file name that includes the phrase Full Installation contains Symantec Endpoint Protection Manager.
   For more information on the available files to download, see A guide to Endpoint Protection files on FileConnect.
6. To download the file, click the file link next to HTTPS Download.
   
7. Repeat this process for any additional files that you want to download. When you are finished, you can close the browser window.

Step 2: Install Symantec Endpoint Protection Manager

Video Walkthrough:

• How to install Symantec Endpoint Protection Manager

To install Symantec Endpoint Protection Manager 14

1. In the folder where you downloaded the Symantec Endpoint Protection installation file, double-click the file to extract all files. If you see an Open File - Security Warning prompt, click Run.
2. Type or browse to a location to extract to, and then click Extract.
3. When the extraction finishes, find and double-click Setup.exe.
4. Click Install Symantec Endpoint Protection.
5. Continue with the installation by accepting the terms in the license agreement, along with all default prompts, and then click Install.
6. On the Welcome to the Management Server Configuration Wizard panel, click Default configuration, and then click Next.
   For a customized installation, such as using a SQL Server database, click Custom configuration.
7. Fill out the required fields to create the system administrator account and email address to which Symantec Endpoint Protection Manager sends notifications, and then click Next.
   You must configure the mail server to receive notification and password reset emails from the management server. You can also enter specified mail server information, and then click Send Test Email. You must verify that you received the test email before you can continue.
8. Choose the following options, and then click Next:
   • Whether or not you want to run LiveUpdate after the installation finishes. Symantec recommends that you run LiveUpdate during installation.
   • Whether or not Symantec collects data from the clients.
   • Partner information, if it applies to your licensing situation.
   This step may take some time to finish.
9. On the Configuration completed panel, click Finish to launch Symantec Endpoint Protection Manager.
10. On the Symantec Endpoint Protection Manager logon screen, type the user name and password you created in step 7 and confirm that you can log on.
    Your user name is admin by default.

As of 14.0.1, you have the option to enroll Symantec Endpoint Protection Manager with the Symantec Endpoint Protection cloud portal. You can enroll the Symantec Endpoint Protection Manager domain any time after installation completes.

Enrolling a domain in the cloud portal from the Symantec Endpoint Protection Manager console

To install Symantec Endpoint Protection Manager 12.1

1. In the folder where you downloaded the Symantec Endpoint Protection installation file, double-click the file to extract all files. If you see an Open File - Security Warning prompt, click Run.
2. Type or browse to a location to extract to, and then click Extract.
3. When the extraction finishes, find and double-click Setup.exe.
4. Click Install Symantec Endpoint Protection.
   For 12.1.6 and earlier, you may need to next click Install Symantec Endpoint Protection Manager.
5. Continue with the installation by accepting the terms in the license agreement, along with all default prompts, and then click Install.
6. On the Welcome to the Management Server Configuration Wizard panel, click Default configuration, and then click Next.
   For a customized installation, such as using a SQL Server database, click Custom configuration.
7. Fill out the required fields to create the system administrator account and email address to which Symantec Endpoint Protection Manager sends notifications, and then click Next.
8. Configure the mail server to receive notification and password reset emails from the management server, and then click Next.
   You can also enter specified mail server information, and then click Send Test Email. You must verify that you received the test email before you can continue.
9. Choose whether or not you want to run LiveUpdate after the installation finishes and click Next.
   Symantec recommends that you run LiveUpdate during installation.
10. Choose whether or not Symantec collects data from the clients, and then click Next to begin the database creation process.
    This step may take some time to finish.
11. On the Configuration completed panel, click Finish to launch Symantec Endpoint Protection Manager.
12. On the Symantec Endpoint Protection Manager logon screen, type the user name and password you created in step 7 and confirm that you can log on.
    Your user name is admin by default.

Although you should not need a SQL Server database for an environment with 500 or fewer clients, you can review the following article for more information: Installing Symantec Endpoint Protection Manager with a custom configuration

Step 3: Activate your license and add a group

After you log on to Symantec Endpoint Protection Manager 14, the Getting Started screen appears with multiple links to common tasks. For example, you can activate your license or deploy Symantec Endpoint Protection clients.

To open this screen at any time, click Help > Getting Started Page in the top right-hand corner of Symantec Endpoint Protection Manager. For video tours of other common tasks within Symantec Endpoint Protection Manager, click Product Tour.

Note:

In Symantec Endpoint Protection Manager 12.1, the Getting Started screen is called the Welcome screen.

To activate your product license

1. In the Getting Started screen, under License Status, click Activate your product.
2. Using your serial number or the .SLF license file that your Order Fulfillment email contains, follow the prompts to install your license.

To create a group for clients

Symantec recommends that you create separate groups for desktops, laptops, and servers.

1. Symantec Endpoint Protection Manager, in the left pane, click Clients.
2. Under Clients, click My Company.
3. Under Tasks, click Add a group.
4. In the Add Group for My Company dialog box, type the group name and a description, and then click OK.
   You can then further configure the group settings, such as policy inheritance.

Step 4: Install the Symantec Endpoint Protection clients

Video Walkthrough: Deploy Symantec Endpoint Protection client software using the Client Deployment Wizard

Before you install the clients by using Symantec Endpoint Protection Manager, check the following items:

• Make sure that the computers can be accessed through the network.
• Make sure that you have administrator credentials for the computers to which you want to deploy.

For unmanaged client installations, see: Installing an unmanaged Windows client.

To install the Symantec Endpoint Protection clients

1. In Symantec Endpoint Protection Manager, in the left pane, click Clients.
2. Under Clients, select the group you created previously.
3. Under Tasks, click Install a client.
   For 12.1, under Tasks, click Add a client.
4. In the Welcome to the Client Deployment Wizard panel, click New Package Deployment, and then click Next.
5. In the Install Packages drop-down list, select the operating system that matches the operating system of the client computers.
6. Choose the following options depending on the operating system you selected in step 5:
   • Windows install package:
     • In the Install Feature Sets drop-down list, keep the default setting of Full Protection for Clients.
     • In the Install Settings drop-down list, keep the default setting of Default Standard client installation settings for Windows.
       In Symantec Endpoint Protection 12.1, keep the default setting of Default Standard-Size Installation Settings.
       These default settings require a restart. To change the restart settings, you need to add a custom client package first. After you add the client package, click Options to select the custom package.
       See Creating custom client installation packages in Endpoint Protection Manager.
     • Choose whether to include virus definitions next to Content Options, and then click Next.
   • Mac install package:
     Keep the default setting for Upgrade settings, and then click Next.
   • Linux install package:
     Click Next. Linux packages are limited to the Web Link and Email or Save Package deployment method.
     Installing the Symantec Endpoint Protection client for Linux
7. Click Remote Push, and then click Next.
8. On the Browse Network tab, browse to your workgroup or domain and select the computers you want to push the Symantec Endpoint Protection client to. After you select the computers, click the >> option to add them to the right pane.
9. After you add the desired computers, click Next.
10. Click Send to initiate the process.
    After the push installation has finished, you see a Deployment Summary window with the results of the push.
11. Click Next, and then click Finish to exit the wizard.
    This window indicates that the install files were successfully copied.
12. To confirm that the client was successfully installed, check that the client exists in the client group that you added in the Clients pane.
    Checking whether the client is connected to the management server and is protected

Step 5: Check that the latest definitions are installed

To check that the latest definitions are installed

1. In Symantec Endpoint Protection Manager, in the left pane, click Home.
2. In the Endpoint Status box, under Windows Definitions, compare the dates for Latest on Manager and Latest from Symantec.
   
3. If the dates do not match, click Help > Getting Started Page, click Run LiveUpdate now, and then click Download.
   In 12.1.x, click the Common Tasks drop-down list, click Run LiveUpdate, and then click Download.

Step 6: Check the database backup settings

To check the database backup settings

1. In Symantec Endpoint Protection Manager, in the left pane, click Admin > Servers.
2. Under Servers, click Local Site (My Site) > localhost.
3. Under Tasks, click Edit Database Properties.
4. On the Backup Settings tab, make any necessary adjustments and then click OK.
   By default, a backup is saved once a week.

Step-By-Step: Setting up Active Directory in Windows Server 2016

There are interesting new features now made available in Windows Server 2016 such as time based group membership, privileged access management, and others. Most will be covered in future posts. This post will detail how to install active directory on Windows Server 2016.

Before the AD install however it is important to understand what is the minimum requirement to install windows server 2016. Details are as follows:

Processor

• 1.4 GHz 64-bit processor

• Compatible with x64 instruction set

• Supports NX and DEP

• Supports CMPXCHG16b, LAHF/SAHF, and PrefetchW

• Supports Second Level Address Translation (EPT or NPT)

Coreinfo is a tool you can use to confirm which of these capabilities you CPU has.

RAM

• 512 MB (2 GB for Server with Desktop Experience installation option)

• ECC (Error Correcting Code) type or similar technology

Storage controller and disk space requirements

Computers that run Windows Server 2016 must include a storage adapter that is compliant with the PCI Express architecture specification. Persistent storage devices on servers classified as hard disk drives must not be PATA. Windows Server 2016 does not allow ATA/PATA/IDE/EIDE for boot, page, or data drives.

The following are the estimated minimum disk space requirements for the system partition.

Minimum: 32 GB

Network adapter requirements

Minimum:

• An Ethernet adapter capable of at least gigabit throughput

• Compliant with the PCI Express architecture specification.

• Supports Pre-boot Execution Environment (PXE).

A network adapter that supports network debugging (KDNet) is useful, but not a requirement.

So in my demo I am using a virtual server with windows server 2016 datacenter. In order to setup active directory we need to log in as local administrator. First thing to check is IP address configuration.

1) Once Active directory setup on the server, it also going to act as DNS server. There for change the DNS settings in network interface and set the server IP address (or local host IP 127.0.0.1) as the primary DNS server.

2) Then open the server manager. Go to PowerShell (as administrator) and type ServerManager.exe and press enter.

3) Then on server manager click on add roles and features

4) Then it opens the add roles and features wizard. Click on next to proceed.

5) Then in next window keep the default and click next

6) Since its going to be local server, in next window keep the default selection.

7) In next window from the roles put tick box for active directory domain services. Then it will prompt to show you what are the associated features for the role. Click on add features to add those. Then click next to continue.

8) The features page, keep it default and click on next to proceed.

9) In next windows it gives brief description about AD DS service. Click next to proceed.

10) Then it will give the confirmation about install, click on install to start the role installation process.

11) Once done, it will start the installation process

12) Once installation completes, click on option promote this server to a domain controller.

13) Then it will open the active directory configuration wizard. In my demo I am going to setup new forest. But if you adding this to existing domain you can choose relevant option. (I am going to write separate article to cover how you can upgrade from older version of Active Directory). Select the option to add new forest and type FQDN for the domain. Then click next.

14) In next page you can select the domain and forest functional levels. I am going to set it up with latest. Then type a password for DSRM. Then click next

15) For the DNS options, this going to be the first DNS server in new forest. So no need any modifications. Click next to proceed.

16) For the NETBIOS name keep the default and click next 

17) Next page is to define the NTDS, SYSVOL and LOG file folders. You can keep default or define different path for these. In demo I will be keeping default. Once changes are done, click next to continue

18) Next page will give option to review the configuration changes. If everything okay you can click next to proceed or otherwise can go back and change the settings.

19) In next windows it will do prerequisite check. If it’s all good it will enable option to install. Click on install to begin installation process.

20) Then it will start the installation process.

21) After the installation system will restart automatically. Once it comes back log in to the server as domain admin.

22) Once log in open the powershell (as administrator) and type dsac.exe and press enter. It will open up the active directory administrative center. There you can start managing the resources.

23) Also you can use Get-ADDomain | fl Name,DomainMode and Get-ADForest | fl Name,ForestMode from powershell to confirm domain and forest functional levels

STEP BY STEP VEEAM INSTALLTION GUIDE

Step by Step Guide Veeam B&R 9.5 Install

In a few days, Veeam should release Veeam Backup and Replication version 9.5 RTM, which contains some significant improvements such as Nimble integration, Direct Restore to Microsoft Azure, VMware vCloud Director support, Microsoft 2016 Data center Technologies and more. Veeam Availability Suite 9.5 final version should be available by mid-November 2016. You can learn more about Veeam Backup & Replication 9.5 new features here.

This article provides a step by step guide to install Veeam B&R 9.5 (Veeam B&R 9.5 Install). If you need to upgrade your Veeam Backup Server (v8 or v9) you can follow this article.

Running the Installer:

Veeam B&R 9.5 Install: You have to run the installation file “Setup.exe”.

If your server will contain both Veeam B&R and Veeam Enterprise Manager, it is required that you install Veeam Enterprise Manager first. Otherwise you can click on the “Veeam Backup & Replication install” window.

Once Veeam Backup & Replication window is opened, click on “Install” button.

Click on “OK” to install .NET Framework 4.5.2.

Installation Wizard:

Once wizard is launched, click on “Next” button.

Accept the terms in the licence agreement and click on “Next” button.

The next screen will require the new license file. If Enterprise Manager was already installed and is on the local machine, the new license file will already be applied by default.

Click on “Next” button.

Next, a screen will appear and show the program features you want to be installed. Click on “Next” button to proceed with the install process.

Then click on “Install” button to deploy missing features.

Click on “Next” button.

Check “Let me specify different settings” box and click on “Next” button.

A prompt will appear for the Service Account Credentials. It is strongly suggested adding a service account with permissions be used instead of the default domain administrator account. If the default domain admin was used, this is a great opportunity to create a new account. In my lab, I used a local administrator account. Click on “Next” button.

By default the option “Install new instance of SQL Server” will be checked (Veeam will detect the existing database in use if the software has been already installed before). You can specify “SA” SQL account. Click on “Next” button. Note: You can follow this postif you need to install Microsft SQL Server Standard version.

You can change the port configuration to be used by Veeam Backup & Replication. I recommand you to let the port configuration by default. Click on “Next” button.

Then, you should specify a dedicated volume where guest file system catalog (persistent data) and vPower NFS write cache (non-persistent data) should be stored. For example you can select D: hard drive. Click on “Browse…” buttons. Finally, click on “Next” button.

The wizard is now ready to begin the installation. Veeam will prompt to install the software, check the configuration and click “Install”.

The install took about few minutes to complete (Microsoft SQL Server 2012 Service Pack 1 Express then Veeam B&R 9.5.).

Veeam B&R 9.5 Install is completed, a prompt appeared to finalize the installation. Click on “Finish” button.

Post Reboot:

When the installation is done, I recommend you to restart properly the Windows server (reboot).

Once the reboot completes and Veeam B&R software has been opened via a click on Veeam Backup & Replication Console icon.

An authentification screen will appear (console). You can fill in the fields and click on “Connect”.

Veeam is now ready to use. Upon opening Veeam, you can perceive the new user friendly interface. You can configure your backup infrastructure and your jobs. You can see new main menu interface:

There is a new nice option, you can change the color of your Veeam B&R interface!

Backup & Replication Console:

Here, you can also install the standalone console on your workstation that supports connecting to remote servers. Since v9, Veeam Backup & Replication console has been broken out from the Veeam B&R server. You have to run the same installation file “Setup.exe”, click on “Backup & Replication Console” and follow the installation wizard.

Veeam Availability Suite 9.5 first full availability solution! Full description!

f