We're pushing HIPS 7 with patch 2 via SMS to remote users due to short loss of connectivity when HIPS is being deployed. For the local users we're using EPO.
The way we did is
1. Created a custom deployment package that copies the install files to the local box. 2. Created a c:\program files\Mcafee\Host Intrusion Prevention\prefs folder and copy fireprefs.txt into it. Needed only if you want to have your firewall rules in place before the client connects to the EPO. This is a must for remote users. 2. Create a run once key to deploy during user logon. We've tried doing it at system startup but could not get it to work correctly. The install takes less then 5 minutes.