Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

How to disable SEP from admin console

Updated: 21 May 2010 | 9 comments
gbug1's picture
0 0 Votes
Login to vote

Hi all,
I have some software that needs to be rolled out to a number of workstations, which requires anti virus to be disabled.
Is there a way to do this from the Symantec Endpoint Protection console?

Cheers.

Comments

Mudit Kumar's picture
04
Aug
2009
0 Votes 0
Login to vote

From the Console you can only

From the Console you can only Disable or Enable Network Threat Protection.

Alos you can Enable Auto Protect, there is no option for Disabling Auto Protect.

Thanks & Regards,
Mudit Kumar
 

kavin's picture
04
Aug
2009
0 Votes 0
Login to vote

HI GBUG1, I have just tried

HI GBUG1,

I have just tried this in my test network.

You can go into the SEPM > Policy > Antivirus and Anti spyware policy . Uncheck the option for the enable auto protect. & then go the advance tab & uncheck the option for enable auto protect after some time.

kavin's picture
04
Aug
2009
0 Votes 0
Login to vote

Doing this is not good

Doing this is not good because this will make your network unsecure.

Please let me know if this works?

gbug1's picture
04
Aug
2009
0 Votes 0
Login to vote

This disables SEP for ALL

This disables SEP for ALL workstations under this policy.
I only want to disable it for a handful of workstations.

kavin's picture
04
Aug
2009
0 Votes 0
Login to vote

You can make a new test group

You can make a new test group & move the clients on which you want to disable the auto protect into that group.
make a non shared policy for Av & ASPY on that group & then disbale the auto protect for that group.
Plase mark this as a solution if this works.:)

ajeet kumar's picture
04
Aug
2009
0 Votes 0
Login to vote

this one also try.. provide

this one also try..
provide enable/disable feature. Create new group-non shared policy then apply.

gbug1's picture
04
Aug
2009
0 Votes 0
Login to vote

Is there a scripted way that

Is there a scripted way that this can be done, that could be included in with the installation package? Something to stop the services , or to unload the SEP client?

shp's picture
05
Aug
2009
0 Votes 0
Login to vote

U can use the following

U can use the following script to stop and start the service

'________________________________________________
' Sample script to Stop a Service
Option Explicit
Dim objWMIService, objItem, objService
Dim colListOfServices, strComputer, strService, intSleep
strComputer = "."
intSleep = 15000

'On Error Resume Next
' NB strService is case sensitive.
strService = " 'Symantec antivirus' "
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" _
& strComputer & "\root\cimv2")
Set colListOfServices = objWMIService.ExecQuery _
("Select * from Win32_Service Where Name ="_
& strService & " ")
For Each objService in colListOfServices
objService.StopService()
'use objService.StartService() to start the service
WSCript.Sleep intSleep
Next
WScript.Echo "Your "& strService & " service has Stoped"
WScript.Quit
' End of Example WMI script to Start / Stop services
'_______________________________________________
OR simple use a batch file with net stop "Symantec Endpoint Protection" and net start "Symantec Endpoint Protection" then create a package of these script's and ur software and diploy.

Regards,
Srinivas H.P.
HCL Infosystems Ltd

pbogu's picture
05
Aug
2009
0 Votes 0
Login to vote

when writing a batch for SEP

when writing a batch for SEP the service will be called "Symantec Endpoint Protection".
or you can call smc.exe -stop (-start to turn back on). this way you can provide a password (smc - stop -p password) if you set password to stop the service.
smc.exe is located in the main folder of SEP (C:\Program Files\Symantec Endpoint Protection by default).