Endpoint Protection

Hi,

How do i protect my unmanaged SEP client with password, I did not find any options at the client configurations changes,

Thanks

What best can be done is you can create an unmanged packge from the SEPM where you can add the password that you want.


Creating an installation package for unmanaged clients with custom policies.
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/a5146874e7b6a6178825747f006d3462?OpenDocument
 

To password-protect the client

1. In the console, click Clients.

2. Under View Clients, select the group for which you want to set up password protection.

3. On the Policies tab, under Location-independent Policies and Settings, click General Settings.

4. Click Security Settings.

5. On the Security Settings tab, choose any of the following check boxes:

   • Require a password to open the client user interface

   • Require a password to stop the client service

   • Require a password to import or export a policy

   • Require a password to uninstall the client

6. In the Password text box, type the password.

   The password is limited to 15 characters or less.

7. In the Confirm password text box, type the password again.

8. Click OK.
   
   http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/526b5fa99c0bc4618825737900369573?OpenDocument
   
   
   To create the new custom install package
   
    

   1. In the Symantec Endpoint Protection Manager console, on the Admin tab, under Tasks, click Install Packages.
      The current default client installation packages appear on the right.
   2. Under View Install Packages, click Client Install Packages.
   3. Under Tasks, click Export Client Install Package.
   4. Browse to or create a preferred export folder, and select it.
   5. Select whether or not you want to create a single .EXE file. Unchecking single .EXE will export mutiple files, including an *.MSI installer file.
   6. Under "Pick the customized installation settings below", from the drop down menu, select your custom Client Install Setting.
   7. Under "Select the features you want to use", from the drop down menu, select your custom Client Install Feature Set.
   8. Choose "Export a managed client", then select the group to which the client will be installed. If no group has been created, select the Default Group. It is recommended to leave "Add clients automatically to the selected group" checked.
   9. Select the Preferred Policy Mode. The default is Computer mode.
   10. Click OK.

   http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/c741ec26fa674b1e8825738a0076abf3?OpenDocument

This option is available for managed clients. The aim of protecting the SEP with password is when it is being used by limited users. When we install SEP as an unmanaged client the client has full authority over the software. This option is exercised in the following situations :-

When the user is a Administrator
When the number of clients is limited to 1 or 2
When we do not need a SEPM for administering client 
When the client is not in a network or a stand alone machine

Would be great if we could set a password even if the user is Administrator of the machine. I'm just asking because there are other Antivirus that ask for pass to stop the antivirus even though if you are the local administrator.


Thanks, for the help.