Endpoint Encryption

Hi

I have configured our SEPM to "Require a password to stop the client service" but on my computer it doesn't apply. I have the green dot indicating that I am communicating with the management server.

Any idea?

Verify the policy has been assigined to the groups you want to have this, then take note of the policy serial number in Clients>Detail for each group the policy is applied to .  You'll need to then verify the policy number matches on the clients in Help & Support>Troubleshooting.

I have verified the policy number.

I configured the password policy on the top level, My Company, and my computer in placed in a group with "Policy inheritance is ON". I can see that the policy number is different between the two folders.
I have confirmed that the policy number from the group where my computer is placed is the same as the one when I check "Help & Suppot  > Troubleshooting" and I can see that it's settings are managed through inheritance.

Lasse

Just to do a test, to see if the management server actually sent out changes to my computer, I changed the setting for "Enable File System Auto-Protect". After updating the policy on my computer I could see the change... so the management server and my computer is communicating fine, but the password part is not applied.

Could it help to replace the sylink.xml file? will properly give it a try.

when I used Sylinkdrop to change the sylink.xml file it actually asked me for a password to be able to shutdown the process.
I entered the password and it replaced the file but I can still select "Disable Symantec Endpoint Protection" without it prompting me for a password.

aaarrrrrhhhhh...... it just hit me :-) the password protection is only when trying to un-install or stop the service, the part about not allowing the user to disable SEP is a different setting......