Endpoint Protection

I have made some change on the Symantec Endpoint Protection server console such as the remove the user right to disable SEP on their desktop,applied the password when users try to remove SEP on their end and Symantec service stop password restiction.

But unfortunetly it won't applied on the clients computer even i assign the policy on the SEP server. Shall i restart the Symantec server or require the restart the SEP service.

Please suggest me how should this policy apply on the clients as soon as i made change on the SEP policy. Also i was waiting one days to reflecting the changes on the clients.

Thanks in advanced.

HI,

What feature have you install SEP client server ?

Check SEP client Policy Serial no and group serial no ?

Thank you Ashish for update, could you please explain or provide the step to find out the feature of SEP and how can check

the SEP client policy seriol no and group no? my symantec Endpoint protection version is 12.1.1101.401 (Release) , RU1MP1 . Windows Definitions   

Latest from Symantec: 09/25/2012 r18
Latest on Manager: 09/25/2012 r18  
 

Please let me know if your need further information from me.Thanks for your prompting response.

HI,

You can check policy no.

Alternately, in the Symantec Endpoint Protection client interface you can choose Help & Support then Troubleshooting, and in the Management pane, look for Policy Serial Number.

 Following article will help you understand more.

Troubleshooting Policy Changes:
http://www.symantec.com/docs/TECH105907

How to Check policy Serial no in SEPM server and client.

Server..

SEP client feature.

NTP feature are enable or not ?

SEPM console -> clients -> Default Group -> policies -> policy serial number : 2610-09/25/2012 11:38:04 299.

Also please find the attached file herewith. please help me on this.

Check client side also both are same or not ?

Yes, probably it is same number in client system. Attached file for your reference. Thanks for update.

Hi,

Please uncheck Inherit Policies and setting from Parent group “My Company”

Probide SEP uninstall password in general setting and check policy are applied or not

SEP client -> Default Group ->Policy ->General Settings

and provide Uninstall password

I followed your given steps ,even noticed the both server and client policy number which is same in both after made change in the policy ,but issue is stilll persisting ,no password prompting while uninstall the agent and having the rights for the disabe and enable SEP on the client computer.

I appreciate your further suggestion on this.Thanks.

HI,

Kindly provide policy snap shot ?

have you uncheck Inherit Policies and setting from Parent group “My Company” ?

Are you enable NTP feature in Sep client ?

Click on update policy in SEP client.

Hi,

Could you please reboot the server if possible?

As per screenshot we don't see any communication problem. Also try to make some other changes in the policy and make sure policy number is updating or not.

Could you please confirm which articles you followed to apply passwords and to disable the access.

How to prevent SEP features from being disabled in the client GUI in SEP 12.1

http://www.symantec.com/docs/TECH168990

HI,

How to give Uninstall Password

Check the Policy from SEPM> Clients > Policies > General-security settings.

How to prevent SEP features from being disabled in the client GUI in SEP 12.1

http://www.symantec.com/docs/TECH168990

Hi

Stop and Start the SMC clients service and observe

Regards

sorry for delay in replying.surely i shall follow all of your above given steps and let us know what happen after done.

what is good symantec documentation i may go through it for the password protection when client uninstallation and disable restart the symantect services and remove the live update users rights  of the client. Can i create two different policy for the intranet desktop users and outside laptop sales users?

I really appreciate your suggestion over this issue. Thank you all so much for the concern and provided the input on this.

HI,

Try to export Syslink.xml file and replace one or two client and check policy are applied or not ?

Are you login local administrator rights in sep client ?

If user are able to disable symantec services you can enable Tamper Protection.

HI,

have you received solution ?

HI Mkadm,

NTP feature installed or not in sep client ?