Monday, 3 September 2012

Best Practices of Installing SEP 11 in Xendesktop

1. Do the installation of SEP 11 after doing all tasks in your base image(private image)
2.You can either go for a managed client or unmanaged client
3.After isntallation stop the symantec services
4.Delete the Hardware ID from registry (HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink)
5.Delete the sephwid.xml file from c:\Program Files\Common Files\Symantec Shared\HWID
6.Make the image to standard and publish to clients
7.If you are using a GUP model in your environment this will be enough.
8. If your update is taken care by a LUA server then change the definitions folder location to your write cache drive if it is in cache on harddisk mode
9.Schedule the LUA during the off peak hours
10.Remove ccApp.exe from HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
11.Disable the network scan via policy if you are using citrix profile manager

1 comment:

  1. Can u pls explain why we we need to remvove the hardware id before making the disk to standard ?

    Also i would like to know how you moved the virus definition folder location to write cache, did that helped to improve the VDA performance ?

    Also when you say disable network scan , is it stopping the SEP policy to not scan c:\program files\citrix\User profile manger folder ?

    can u pls respond to me @