The status shows as "Started"

Is this not the case?

Hi,

it's not a issue.

by default SEP 12.x Tamper Protection are on .

If you don't want kindly change setting.

Please do the following:

1. Open the Symantec Endpoint Protection Manager.
2. Click the Clients tab.
3. For any group, on the right hand side, select the Policies tab.
4. In the Location-independent Policies and Settings, click General Settings.
5. On the General Settings screen, click the Tamper Protection tab.
6. Verify the option labeled "Protect Symantec security software from being tampered with or shut down."

If this is enabled, the option to stop the Symantec Management Client service (smcservice) from service control manager will be unavailable. If it is disabled, stopping smc from the service control manager is allowed.

Tamper Protection is already off but still i cant stop service.

Hi,

has the client taken the policy?

Check SEP client policy no and SEPM group Serial no ?

stop smc service, it will stop.

Please check the following article to know new fixes in 12.1 RU1.

New fixes and features in Symantec Endpoint Protection 12.1 Release Update 1:

http://www.symantec.com/docs/TECH174565     

The Issue has been resolved in the SEP 12.1 RU1 MP1.

Have you restarted the machines after you TURN OFF the User Account Control (UAC)?

http://www.symantec.com/connect/forums/fix-id-2610970-sep-121-ru1-mp1

its Unmanaged Client not Manage Client.
So no policy is applied on that.