locked
Enterprise EMET deployment with BigFix (IBM Tivoli Endpoint) RRS feed

  • Question

  • I am looking to deploy EMET throughout the enterprise. I have read the EMET User's Guide and there are detailed steps for using SCCM to create a package. Has anyone deployed it with BigFix and are there any reasons why EMET should not be treated like any other package to deploy?

    Thanks.

    Tuesday, March 19, 2013 4:03 PM

All replies

  • I'm in the middle of doing that now.  I have it installed on over 20,000 PCs so far.  There seems to be some quirks with the MSI.  You'll want to try different options in your environment and see what works best for you.  One annoying thing is that the installer doesn't seem to properly create the event log for EMET for users that do not have local administrative rights.  Throw a dos "C:\Program Files (x86)\emet\EMET_notifier.exe --InitEventViewerSource" post install in your script to force create the event log as admin and that should prevent them from getting any errors about the event source being missing after reboot.

    Cheers,

    Eric

    Thursday, March 28, 2013 8:04 PM