I need a solution
I am currently deploying SEP across my region of my company. in each of our 17 locations we have a server on site. and the SEP Manager is on a virtual server at our global headquarters. My intention is to have the server in each location be the GUP for the 30-40 computers in each location. and the 17 servers pull their updates from the SEPM. ive spent some time reading the forums and haven't quite spotted exactly what I needed yet so I wanted to post my own thread. this is my first real experience with SEP deployment so forgive me if I don't relay everything 100%.
so my current layout has My Company with 5 Groups,
Default Group
Mac Clients
PC Clients
POS Clients
Servers
At the moment I am really only concerned with the PC clients and the servers. now as it stands the goal was to have any pc client whos subnet matched the subnet of the on site server and pull the live updates from there. We have one policy set for the servers and one set for all the PC clients.
we set the live update policy server settings for the server policy with the following conditions. use default management server checked, use a live update server checked, the radio button for the default live server checked, use a group update provider, when you go to the definitions for that, multiple group update providers is checked, when you go to configure that the only condition I have set is each of the servers set by host name.
when going to the policy that is used on the pc clients live update policies server settings they are as follows:
use default management server is checked, use a live update server is checked, use the default symantec live update server is radio button is selected. use a group update provider is checked. the provider settings are as follows:
Explicit group update providers for roaming clients is checked and defined with each of the servers listed by host name.
from what I have read some people suggest moving the server clients into the same site location as its computers, some suggested uninheriting permissions and having each site location with a unique permission based off the original just having the one on site server listed. im a little past my area of expertise and would appreciate some help.