Configuring Clients Using The Configurations File - Symantec 10551441 - AntiVirus Corporate Edition Installation Manual

158 Installing Symantec AntiVirus clients

Configuring clients using the configurations file

Configuring clients using the configurations file
To use the Reset ACL tool, complete the following tasks:
Roll out ResetACL.exe, which is located on the Symantec AntiVirus CD in the
■
Tools folder, to Windows NT 4.0 computers that are not secure.
Run ResetACL.exe on each Windows NT 4.0 computer.
■
After you run ResetACL.exe, only users with administrator rights can change
the registry keys.
Trade-off considerations for the Reset ACL tool
While the Reset ACL tool boosts security for Symantec AntiVirus on Windows
NT 4.0 computers, there are several trade-off considerations.
In addition to losing access to the registry, users without administrator rights
cannot perform the following operations:
Start or stop the Symantec AntiVirus Corporate Edition service.
■
Run LiveUpdate.
■
Schedule LiveUpdate.
■
Configure antivirus protection. For example, they cannot set Auto-Protect or
■
email scanning options.
The options that are associated with these operations are unavailable in the
client interface.
Users can modify scan options, but the changes are not saved in the registry nor
are they processed. Users can also save manual scan options as the default set,
but the options are not written to the registry.
You may want to use the configurations file (Grc.dat) to configure clients when
you do any of the following:
Install an unmanaged Symantec AntiVirus client.
■
Change the parent server of a managed client without having to uninstall
■
and reinstall the client.
To assign the client to a parent server, complete the following tasks in the order
in which they are listed:
Obtain the configurations file.
■
See "Obtaining the configurations file"
Copy the configurations file to the client.
■
See "Copying the configurations file to the client"
on page 159.
on page 159.