Where I work, we are pushing out the SEPC client to replace SEP v14.
This is how the install works once pushed.
The executable runs, and downloads a .dat file - The current version of protection is removed automatically.
Once it is ready - it prompts the user to reboot in xx minutes.
A scheduled task is created by the installation to run after reboot.
Where to get the SEPC_Install.exe?
Log into your SEPC dashboard - create a new installation package. Download the package and extract it.
It will create the following files:
SEPC_Package (folder)
SEPC_Install.exe
SEPCDeployment.msi (For our scenario - this would not work)
SEPCDeployment.mst (Answer file for the msi)
Here is the meanings of the parameters:
/m - minimized
/FORCE_INSTALL - forces to install
/IGNORE_USER_SESSION - this is what we needed to use to have the restart notification appear on users screens after "SYSTEM" finished running the start of the install process
/ADMIN_INITIATED - If it did show up on users desktop - the "x" is disabled to prevent closing out (But can be closed/ended in taskmgr)
/UNATTENDED - allows .exe to send finished status code
/UPGRADE_DELAY x : Number of minutes to wait before installing/uninstalling current protection - not visible to end user in our configuration
/SMART_RESTART x : number of minutes to wait after uninstalling current protection to reboot - this does show to end user logged in
