Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

prevent client from updating

Updated: 20 Jun 2010 | 5 comments
mithrax's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

A client of ours employed a person that had a personal laptop and the company allowed that laptop to get the companies sep installed on it.  The companies sepm is installed so it will update clients out of the office as well as in.  This person has now left the company and the laptop is still checking in. 
What can be done to prevent the sep for updating?  I believe there is no way to uninstall sep for the console so what can you do?
 

Comments

Vikram Kumar-SAV to SEP's picture
12
May
2010
0 Votes 0
Login to vote

If your SEPM is inside your

If your SEPM is inside your LAN then how is he connecting to it from outside ?
Remove the SEP client from SEPM..right click on the group--properties-check -Block New Clients

or go 
SEPM- Admin-Server- Local Site- SEPM Server Name- right click-properties-
Server communication permission - Add- Single Client and give the IP of the Laptop.

Koosah's picture
12
May
2010
0 Votes 0
Login to vote

There is not much you can do

There is not much you can do other than using a perimeter firewall and blocking the host. If they aren't working for you they shouldn't have access to your network anyways.

Symantec Technical Specialist

Please don't forget to mark which thread solved your issue!

Thomas K's picture
12
May
2010
0 Votes 0
Login to vote

How about dropping this

How about dropping this client into unique group, create a firewall policy to block communication to your network and assign to the new group. Once he has updated his policy, then delete  the SEP client from the SEPM.

Vickna's picture
12
May
2010
0 Votes 0
Login to vote

Have a go at this.

Have a go here.. i know it says it can't be done through SEPM, but maybe a script that is pushed to the client the next time it checks in?
https://www-secure.symantec.com/connect/forums/how-uninstall-sep-client-sepm-server

I've not tried it but the suggestion by jmadiwale might be worth a shot: 
"There is a directory at- " \Symantec_Endpoint_Protection_11.0.5_AllWin_EN_CD2\Tools\NoSupport\CompetitiveUninstall\SEPUninstaller". The readme.txt inside details how to use the tool to remove SEP remotely using the 'Find Unmanaged Computers' tool in the SEPM."

thanks,
vickna

mithrax's picture
18
May
2010
0 Votes 0
Login to vote

It looks like block new

It looks like block new clients is going to work for me.  This will prevent the unwanted client from updating.  Its better than nothing

Remove the SEP client from SEPM..right click on the group--properties-check -Block New Clients
I also had to block the Default group as I had created a new group and put the laptop and test items in there.
I have tested with another computer and it does not have the green dot any more.
It should then display a definitions out of date after 30 days.