[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1586
  • Last Modified:

Mcafee Antivirus install on Citrix How?

Hi,

Anyone please confirm what is the RIGHT way to install antivrus software on a Citrix server. Since the antivirus is not going to be published does it still have to be installed in a user install mode as below?? If so why?

change user /install

Also - any windows updates or any programs that are NOT going to be published how should those be installed etc...?



Thanks
0
badabing1
Asked:
badabing1
  • 3
  • 2
1 Solution
 
snusgubbenCommented:
If the installation package is a MSI from MS or Citrix, the MSI will put the server in install mode. From other vendors (atleast whom I trust) you can't be sure the MSI will set the TS in install mode.

Installation that affects the HKCU registry and ini-files located in user profiles, the server needs to be in install mode. The secure way is the manually set the server in install mode to be 100 per cents sure things don't goes wrong.

Should not be users logged on when you install (because they might lock the HKCU reg/ini-files for writing).

Windows update don't modify HKCU or users ini-files.

My prefered way:

1. change logon /disable
2. query user (get them out if someone is logged on)
3. change user /install
4. install the software
5. change user /execute
6. change logon /enable


SG
0
 
snusgubbenCommented:
addon:

Here is the guidelines from Citrix regarding anti-virus: http://support.citrix.com/article/ctx114522


SG
0
 
badabing1Author Commented:
so is Mcafee install  needed to be install mode, if so why?

Thanks
0
 
snusgubbenCommented:
From https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/20000/PD20689/en_US/vse_870_installation_guide_en-us.pdf:
--------------------------
Install and configure the software for use with other products
When installing VirusScan Enterprise software where third-party products are installed, or when
using it with supporting products, you might need to change the installation procedure or
perform additional configuration. For example, if you are using the Setup utility to install the
VirusScan Enterprise software where Windows 2003 with Terminal Services is installed, the
installation stops and you are notified to install the program files using the Windows Add/Remove
Programs utility.
NOTE: This installation method is not required if you are using ePolicy Orchestrator to deploy
VirusScan Enterprise.
--------------------------

This states that you need to set the server in install mode. (doing the installation from Add/Remove Program will set the TS in install mode. Another way of typing "change user /install").

Why McAfee say you do is probably because the installation writes to the HKCU.


SG
0
 
badabing1Author Commented:
thanks
0

Featured Post

Free recovery tool for Microsoft Active Directory

Veeam Explorer for Microsoft Active Directory provides fast and reliable object-level recovery for Active Directory from a single-pass, agentless backup or storage snapshot — without the need to restore an entire virtual machine or use third-party tools.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now