Endpoint Protection

Is there a way to disable users from running manual scans on SEP 12.1 I have a requirement to audit workstations and if the user starts a scan it fills up my audit log because the RTVscan.exe tries to write to every file it scans.

Hello,

There is no way to disable the users to Run the Manual Scan. It is by design.

However, you may restrict users from making changes.

Check these Articles / Thread:

How to block a user's ability to disable Symantec Endpoint Protection on Clients

http://www.symantec.com/docs/TECH102822

Thread:

https://www-secure.symantec.com/connect/forums/how-block-users-ability-disable-symantec-endpoint-protection-clients-1

How can I stop an unwanted scan on a Symantec Endpoint Protection (SEP) 12.1 client.

http://www.symantec.com/docs/TECH171788

Do you mean when the user right clicks on a file or folder and selects "Scan for Viruses..."?

There is nothing to stop the user from creating a new scan that I know of. What you could do is password protect the client so when they try to open the icon it will prompt for a password

Hi,

It's not possible to restrict users from accesing SEP manual scan option.

It's by design. You can achieve it by setting passwords to access SEP client GUI.

Also you can refer this:

How to block a user's ability to disable Symantec Endpoint Protection on Clients

http://www.symantec.com/docs/TECH102822