Endpoint Protection Small Business Edition

 View Only

  • 1.  How to unable clients to change the config of Endpoint Small Business?

    Posted Aug 03, 2011 03:34 PM

    Hello,

     

    We have just bought Endpoint Small Business (1 server and 8 clients), but I have a question : clients seems to be unable to desactivate real-time protection. How to change that ?

    All clients appear in the server management software, so I think they are linked to the server. But I would like to :

     - hide the icon on the system tray for every client
     - unable client to open or change anything on Endpoint Small Business (can I set a password for example ?)

    Thanks

    François



  • 2.  RE: How to unable clients to change the config of Endpoint Small Business?

    Posted Aug 03, 2011 03:55 PM

    I doubt if these are in Small business; but these are in symantec endpoint protection enterprise 

    http://www.symantec.com/business/support/index?page=content&id=TECH102700

     

    http://www.symantec.com/connect/forums/hide-tray-icon-endpoint-protection-small-business



  • 3.  RE: How to unable clients to change the config of Endpoint Small Business?

    Trusted Advisor
    Posted Aug 05, 2011 09:24 AM

    Hello,

    What version of SEP are you carrying ??

    When you say, they are linked to server, I am assuming, that you mean they are Managed.

    Is that Symantec Endpoint Protection SMB 12.0 or  Symantec Endpoint Protection SMB 12.1??

    If incase it is Symantec Endpoint Protection SMB 12.0, then the Articles provided by Rafeeq's are good.

    A "Thumb's up" to his comment.

    http://www.symantec.com/docs/TECH102700

    http://www.symantec.com/docs/TECH97207

    Also, check the Registry:

     

    To hide the shield icon we will need to add the following registry (dword 32bit) and set the value to 0

    HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\LaunchSmcGui

    You will need to restart SMC service before you can see the effect.

    When disabling SmcGui, the following functionalities are also disabled:

    • No SEP icon on the system tray
    • No ability to open the system logs from the client GUI
    • No ability to see the firewall or SNAC status from the GUI (most customers will not install a firewall on their Terminal Server)
    • No startup scans
    • No delayed threat detection notifications
    • No missing or out of date definition notifications
    • Clients do not display all information in the Help & Support > Troubleshooting > General Information (Server, Group, Location, Policy serial number, etc)
    • Clients locally show as Offline on the Help & Support > Troubleshooting > General Information view. In reality the client is still forwarding stateful information and log data to the Symantec Protection Center (SPC).
    • Clients do not show the Logon Client status on the SPC client status view.