Video Screencast Help

How to disable AV protection on client

Created: 05 Mar 2009 • Updated: 21 May 2010 | 6 comments

Hi

 

In the EP Manager under "Clients" we can disable and enable the Network protection on a client, but where can we disable the AV protection? Because sometimes when we have to install software on a client computer, we have to disable the SEP on this computer for some minutes.

 

Isn't that possible?

 

Regards

Wayne

Comments 6 CommentsJump to latest comment

brav's picture

There should be an option to Disable Auto-Protect ?

m00

dries_vb's picture

You cannot do that from sepm. On the machine itself you can stop the smc service if you want to, however I don't think that it stops the AV protection itself...

brav's picture

Aye, dries_vb is right actually. you can only Enable Auto-Protect from the management console.

To stop scanning , just perform these tasks.

 

Open Services.msc

(this depends on your tamper protection settings also if you have any ?)

 

Set the following services as disabled and to Take No Action in Recovery options:

Symantec Endpoint Protection

Symantec Event Manager

Symantec Management Client

Symantec Network Access Control

Symantec Settings Manager

 

Now Stop the following services:

Symantec Endpoint Protection

Symantec Event Manager

Symantec Network Access Control

Symantec Settings Manager

 

Go to start run & type : SMC -STOP (enter a password if prompted)

In task manager end task on ccApp

 

AV Protection will be disabled now. To re-enable reverse the tasks but use SMC -START instead of STOP.

 

Cheers

m00

screech's picture

Aye, dries_vb is right actually. you can only Enable Auto-Protect from the management console.

To stop scanning , just perform these tasks.

 

Open Services.msc

(this depends on your tamper protection settings also if you have any ?)

 

Set the following services as disabled and to Take No Action in Recovery options:

Symantec Endpoint Protection

Symantec Event Manager

Symantec Management Client

Symantec Network Access Control

Symantec Settings Manager

 

Now Stop the following services:

Symantec Endpoint Protection

Symantec Event Manager

Symantec Network Access Control

Symantec Settings Manager

 

Go to start run & type : SMC -STOP (enter a password if prompted)

In task manager end task on ccApp

 

AV Protection will be disabled now. To re-enable reverse the tasks but use SMC -START instead of STOP.

 

Cheers

m00

jeffwichman's picture

If you move the computer to a group with a different policy that has AV disabled (unchecked), when the client checks in, AV should disable itself.

Wayne1's picture

Thx all for your suggestions!

 

I think that should be a function symantec have to implement in the next build.

 

So we will create a Dummy-Group with a policy "all functions disabled" and move the computers to this group.

 

Regards

Wayne