Endpoint Protection Small Business Edition

 View Only
Expand all | Collapse all

deny users from changing SEP Client settings

  • 1.  deny users from changing SEP Client settings

    Posted Jan 03, 2013 05:36 AM

    dear all,

    i can't figure out how to deny my users (which must have local admin rights) to change settings and disable SEP Client on the workstation... would be great to have a password to unlock different functions...

     

     

    best regards

     

    roman 

     

     



  • 2.  RE: deny users from changing SEP Client settings

    Posted Jan 03, 2013 05:39 AM

     

    You can Set uninstall password SEP client

    1. In the console, click Clients.

    2. Under Clients, select the group for which you want to set up password protection.

    3. On the Policies tab, under Location-independent Policies and Settings, click General Settings.

    4. Click Security Settings.

    5. On the Security Settings tab, choose any of the following check boxes:

      • Require a password to open the client user interface

      • Require a password to stop the client service

      •  Require a password to import or export a policy

      • Require a password to uninstall the client

    6. In the Password text box, type the password.

      The password is limited to 15 characters or less.

    7. In the Confirm password text box, type the password again.

    8. Click OK.

     

     

    How to block a user's ability to disable Symantec Endpoint Protection on Clients

    http://www.symantec.com/docs/TECH102822

    How to restrict users from making configuration changes to the Symantec Endpoint Protection client.

    http://www.symantec.com/docs/TECH102370

     Check this Thread:

    https://www-secure.symantec.com/connect/forums/how-do-i-temporary-enable-users-ability-disable-symantec-endpoint-protection-clients

    https://www-secure.symantec.com/connect/forums/notification-when-sep-client-uninstalled



  • 3.  RE: deny users from changing SEP Client settings

    Broadcom Employee
    Posted Jan 03, 2013 05:41 AM
    basically you should be able to lock the settings from SEPM console and push the policy to client.


  • 4.  RE: deny users from changing SEP Client settings

    Posted Jan 03, 2013 06:33 AM
      |   view attached

    i have neither "clients"  nor security settings - my console looks like this screenshot:

     



  • 5.  RE: deny users from changing SEP Client settings

    Posted Jan 03, 2013 06:40 AM

     

    HI,

    Do you have login Admin account  ?

    If no try to login admin account



  • 6.  RE: deny users from changing SEP Client settings

    Broadcom Employee
    Posted Jan 03, 2013 06:43 AM
    oops. I do not think SEP SBE have these settings


  • 7.  RE: deny users from changing SEP Client settings

    Posted Jan 03, 2013 06:54 AM
    oops. I do not think SEP SBE have these settings

    Are you Joking?



  • 8.  RE: deny users from changing SEP Client settings

    Posted Jan 03, 2013 06:59 AM

    Hi,

    If you are using Small Business Edition so may be this setting are not available. 



  • 9.  RE: deny users from changing SEP Client settings

    Posted Jan 03, 2013 07:08 AM

    This is by design, these settings are not available in SBE.



  • 10.  RE: deny users from changing SEP Client settings

    Trusted Advisor
    Posted Jan 03, 2013 07:28 AM

    Hello,

    Check this Article - 

    How to block a user's ability to disable Symantec Endpoint Protection Small Business Edition on Clients

    http://www.symantec.com/docs/TECH172434

    Hope that helps!!



  • 11.  RE: deny users from changing SEP Client settings

    Broadcom Employee
    Posted Jan 03, 2013 09:36 AM

    Hi,

    How to prevent SEP features from being disabled in the client GUI in SEP 12.1

    http://www.symantec.com/docs/TECH168990

    The same article is available on the forum as well

    http://bit.ly/KeJB4H



  • 12.  RE: deny users from changing SEP Client settings

    Posted Jan 04, 2013 01:39 AM

    yes, this is not perfect but close!

     

    problem solved, thank you very very much!!
     

    roman



  • 13.  RE: deny users from changing SEP Client settings

    Broadcom Employee
    Posted Jan 04, 2013 06:38 AM

    Hi,

    Under Virus & Spyware policies three policies are by default created.

    1) High Performance

    2) High Security

    3) Balanced

    By default balanced policy is assigned, if you assign high security it will locked all the items.