Testing and removing items from system lockdown

Article:HOWTO55137  |  Created: 2011-06-29  |  Updated: 2011-12-16  |  Article URL http://www.symantec.com/docs/HOWTO55137
Article Type
How To


Subject


Testing and removing items from system lockdown

If you have file fingerprint lists that you want to remove from system lockdown, you can test the removal before you delete them from the system lockdown configuration.

See Configuring system lockdown

Testing and removing items from system lockdown

  1. On the console, click Clients.

  2. Under Clients, locate the group for which you want to remove items from system lockdown.

  3. On the Policies tab, click System Lockdown.

    The system lockdown configuration should already be enabled.

    See Enabling system lockdown to block unapproved applications.

  4. Check Test Before Removal next to any file fingerprint list or application that you want to test.

    System lockdown continues to allow these applications, but they are logged as unapproved applications.

  5. Click OK.

    Typically, you might want to run this test for a week or more and then check the Control log. If your clients are no longer using the applications, you can remove them from the system lockdown configuration.


Legacy ID



v36209105_v59371754


Article URL http://www.symantec.com/docs/HOWTO55137


Terms of use for this information are found in Legal Notices