These articles will help you:
How to block a user's ability to disable Symantec Endpoint Protection on Clients
http://www.symantec.com/docs/TECH102822
How to lock down Symantec Endpoint Protection 12.1 Client
http://www.symantec.com/docs/TECH167182
How to restrict users from making configuration changes to the Symantec Endpoint Protection client
http://www.symantec.com/docs/TECH102370
How do you lock down SEP client interface so that end users cannot disable components or modify settings
http://www.symantec.com/docs/TECH136678
Securing the Symantec Endpoint Protection (SEP) client user interface and settings
http://www.symantec.com/docs/TECH185903
How to prevent SEP features from being disabled in the client GUI in SEP 12.1
http://www.symantec.com/docs/TECH168990