Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Preventing user from removing endpoint subfeatures

Updated: 21 May 2010 | 2 comments
Shireesh's picture
0 0 Votes
Login to vote

After deploying clients we noticed user could remove subfeatures using 'Symantec Endpoint Protection'change option in Add or Remove programs such as

 

Proactive threat protection ('Truscan'/'Application and Device control') or Network threat protection ('Firewall and Intrusion Prevention)

 

We can pevent user to remove endpoint but could not find a way we could stop user make above changes.

 

Please share any inputs on this issue.

 

Thanks

Shireesh

 

 

 

 

 

Comments

tommyhawk's picture
18
Dec
2008
0 Votes 0
Login to vote

This will fix you up.  I found this linked document earlier today by using the search option within this forum.

 

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007110514540148?Open&seg=ent

 

As someone on this forum often posts - "try using search".

Paul Murgatroyd's picture
18
Dec
2008
0 Votes 0
Login to vote

we are looking to fix this in a later build, but the easiest way to do it is to add the following registry key:

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\<SEP GUID>\NoModify (as REG_DWORD) and set it to 1

 

That will remove the change button from Add/Remove programs.

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint