How to delay the initial Host Integrity Check for SNAC12.1/SNAC11.0

Article:TECH188751  |  Created: 2012-05-14  |  Updated: 2012-05-27  |  Article URL http://www.symantec.com/docs/TECH188751
Article Type
Technical Solution


Environment

Issue



You want to get Host Integrity Check delayed at the initial time after the system starts.


Environment



SNAC11.0/SNAC12.1


Solution



Initial Host Integrity check can be controled with DWORD registry "Initial_HI_Delay".

Before making any changes to the registry, Symantec recommends that you backup each affected system's registry before making any changes.
 

  1. Open the registry with Regedit and navigate to the following key:
    "HKEY_Local_Machine\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC"
  2. Add the following String Value:
    DWORD: Initial_HI_Delay

The default value is: 1
The value is in minutes.

If Tamper protection is enabled on SEP12.1 with SNAC feature enabled, adding registry key under symantec will be blocked by Tamper Protection. You need to disable Tamper Protection before changing the registry keys.

Note:
The maximum "Initial_HI_Delay" value is equal to the HI check interval  which is configured in [Check Host Integrity every] in HI policy of SEPM.
If the "Initial_HI_Delay" value is bigger than the HI check interval, it will only delay for about HI check interval.

 




Article URL http://www.symantec.com/docs/TECH188751


Terms of use for this information are found in Legal Notices