Endpoint Protection

hi Symantec Support,

I need to hide "Disable Symantec Endpoint Protection " on task bar how can do it.some of user disable SEP client service so ADC policy not applied.

Please provide steps...

HI,

Check this artical

How to block a user's ability to disable Symantec Endpoint Protection on Clients

http://www.symantec.com/business/support/index?page=content&id=TECH102822&locale=en_US

How to restrict users from making configuration changes to the Symantec Endpoint Protection client.

http://www.symantec.com/docs/TECH102370

also you can protect sep client service

You can Set uninstall password SEP client

1. In the console, click Clients.

2. Under Clients, select the group for which you want to set up password protection.

3. On the Policies tab, under Location-independent Policies and Settings, click General Settings.

4. Click Security Settings.

5. On the Security Settings tab, choose any of the following check boxes:

   • Require a password to open the client user interface

   • Require a password to stop the client service

   •  Require a password to import or export a policy

   • Require a password to uninstall the client

6. In the Password text box, type the password.

   The password is limited to 15 characters or less.

7. In the Confirm password text box, type the password again.

8. Click OK.

Check this thread

https://www-secure.symantec.com/connect/forums/notification-when-sep-client-uninstalled

https://www-secure.symantec.com/connect/forums/how-disable-disable-symantec-endpoint-protection-client-side-console

Go through below link

http://www.symantec.com/docs/TECH102822

How soon it takes effect ?

Depends on heartbeat..

ah so if it is pull, then it is activated after the client log off and relogin again ?

That would be one way. If in pull it would check in every x minutes and receive a new policy if one is available so there may be some delay depending on what you have it set to.

You can also force the client to check in immediately but right clicking the SEP icon and selecting the update policy option.

Great, that does make sense Brian !