Symantec Endpoint Protection Manager Console looks strange — installed correctly

This may be accomplished by putting a WMI filter on your deployment GPO objects. The Group Policy engine on the client machines will check this filter to see if the specific GPO applies to them. It does impact performance, but it'll do what you need.

A good filter could be:

select * from Win32_OperatingSystem where OSArchitecture='64-bit'

It won't catch any XP-64 you may have around, but should catch the 64-bit Vista and Win7 installs. The inverse of this should catch your 32-bit installs:

select * from Win32_OperatingSystem where OSArchitecture<>'64-bit'

If it isn't explicitly 64-bit, install the 32-bit version. Alternately, you could just put '32-bit' in there if you'd rather go that route.

Live update should show up in your add/remove programs, as well as under your Start > Programs.

Read over the Content Cache Directory. It should be safe to clean that up. It also has a link about how to use Client Cache Control