Semi-automatic McAfee Deployment
Using LanSweeper as the workhorse…
Scope.
This is a rough description, on how deployment of McAfee VirusScan Enterprise, and AntiVirus updates can be implemented using the Deployment feature in LanSweeper software.
This solution can be desirable on networks that is forced to manually updating the AntiVirus systems.
Prerequisites.
- LanSweeper must be installed somewhere on the LAN, and configured to scan all workstations without any restrictions.
- A file share accessible from all workstations must be available, and populated with the relevant files.
- An Active Directory service account, with a minimum of read & execute rights on the file share.
Keep in mind that using an administrator account is a severe security risk! This password will potentially be accessible to all users.
Configuration.
- Import the package xml-file by clicking the Import button on the "Deployment - Packages" webpage in LanSweeper. See figure 4.
- Edit the imported package to fit your file share path etc.
- Create a "New schedule". See figure 5 and 6.
- Create a "New Deployment Configuration". See figure 5 and 7.
Daily use.
- Place the current AntiVirus update file in the folder named '{PackageShare}\McAfee\XdatUpdates' and rename it to 'xdat.exe'
- Delete all log files located at '{PackageShare}\McAfee\XdatUpdates\Logs\'
- When the scheduled execution time have been passed, examine the folder '{PackageShare}\McAfee\XdatUpdates\logs' for each workstations resulting log file.
What the package does.
- Check if the current workstation have been updated recently .
- If the workstation have been updated, no more actions will be done for this workstation.
- If the workstation have not been updated, check if McAfee AntiVirus 8.8 is installed.
- If McAfee AntiVirus 8.8 is not installed,
- Install McAfee AntiVirus 8.8, and then update with the available xdat file, creating an update-log file with the name of the current workstation.
- If McAfee AntiVirus 8.8 is installed,
- Update the McAfee AntiVirus 8.8 installation with the available xdat file, creating an update-log file with the name of the current workstation.