Endpoint Protection

All of our clients have the option to right click the SEP client icon and select "Disable Symantec Endpoint Protection"

I was testing this and I noticed that only Network Threat Protection is disabled

So my question is this: Is this misleading somewhat or is SEP truly disabled?

To stop users from disabling SEP on any components of sep you need to do the following:

1. Open the Antivirus and AntiSpyware Policy
2. Click on the file system auto-protect.
3. Lock all the options using the Lock icon.
4. Lock all options under all tabs (like : action, notification etc)
5. Repeat the steps for all others (like : Internet email auto protect, etc.)

If any one of the lock is open, the user will be able to disable atlease one of the options.

Hi

Please follow the following link to block the users ability to disable SEP

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007110514540148

I don't want to block it. I want this option for a group of our programmers.

I just want to know if SEP is truly disabled when selecting this option. The only thing that shows as disabled in the client interface is NTP. Both Antivirus/Antispyware and PTP are green which leads me to believe they are not disabled.

 When you right-click ->disable SEP only those pieces of the client that the user is normally allowed to disable become disabled.

If you were to remove the users rights to disable any portion the option would grey out. If you were to allow (in the Antivirus policy) the users to disable autoprotect then both NTP and AV would be disabled by that right click option.

Perfect, thanks.