Please check this document

How to block user's ability to disable Symantec Endpoint Protection on Clients

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007110514540148

this is not what i'm looking for. This applies to Endpoint Protection 11. We have the Small Business Edition version 12.0.

I dont think that option is present..

Good to add in ideas section.

This may be what you are looking for -

SEP SBE 12.0 - locking down the clients

https://www-secure.symantec.com/connect/forums/sep...

Cheers,
Thomas

Nope, that link does not have any fixes and we don't have the option to take away local admin rights due to certain circumstances etc... so i gues this is a flaw with this version of Software which needs to be looked into ASAP.

If you have all "Locks" enabled on the server, the only feature that can be disabled when clicking the taskbar icon will be the Network threat Protection.
Lock down of the taskbar icon will come in a later version of SEP12 SBE.

I hope this answered your question.

Thomas

Any news yet?
I'm having this issue too. But the strange thing is; not all clients are seeing the option to disable the SEP greyed out. All computers use the same policy and they are all XP-pro sp3.

The trouble is that some people do disable SEP and that makes the product completely useless because as an administrator I can not prevent this.

What is the nitty gritty detail that makes some clients different than others?

@ Ed.Kok,  If you apply the "Locks", the only thing your users should be able to disable is NTP. Can you confirm this in your environment?

Thomas

Did you change all the padlocks to closed on the server?  If so, did this work to prevent users from disabling the SEP client?
 

Thanks for the replies.

Yes, I did apply all the locks and no, it did not prevent users from disabling. Well, not all of them while they are in the same group and hence having the same policy!!
My conclusion is that there is a difference on the workstation itself that causes this to 'fail'. I already read about the setting for 'simple file sharing', but that isn't it.

Still on some machines the option 'Disable Symantec Endpoint Protection Small Business Edition' is not greyed out.