Create a Group for these mobile clients move them to that group.
then on the group

Right-click the client group.

Uncheck Inherit settings from Server Group.

Right-click the client group, and then select All Tasks > Symantec AntiVirus > Virus Definition Manager.

In the Virus Definition Manager dialog box,Check Schedule client for automatic updates using LiveUpdate, click Schedule, specify a schedule, and then click OK.

For registry this is the key responsible for it

HKEY_LOCAL_MACHINE\SOFTWARE\Intel\LANDesk\VirusProtect6\CurrentVersion\PatternManager

http://www.simplepctalk.com/2007/12/liveupdate-locked-cant-update-symantec-antivirus/

Thanks for your answer - the problem still exists.

The policy is set to "Do not allow client to manually launch LiveUpdate" unchecked. The Registrykey is also set correct to 0 (HKEY_LOCAL_MACHINE\SOFTWARE\Intel\LANDesk\VirusProtect6\CurrentVersion\PatternManager\LockUpdatePattern value 0).

The problem is that a normal domain user has no permissions to start LiveUpdate manually. I do not want to configure all the notebook clients to start LiveUpdate every day - because it is to much network traffic.
And i have found no way to give a domain user the rights to lunch LiveUpdate - has somebody an idea?

regards

You can possible create a policy in which SEP liveupdate will automatically connect to internet. I will get back to you as soon I got back to office. We create a separate policy when Workstation is in or out your environment or network.

@jhay6600@yahoo.com
Thanks, but this is here not possible because we have to use Symantec AntiVirus 10.1.x and you use Symantec Endpoint Protection 11.

@Rafeeq
Thanks, this way it works.

regards
Kai Schumacher