Endpoint Protection

this is related to this thread https://www-secure.symantec.com/connect/forums/liveupdate-button-will-not-enable.

In addition, I've changed this setting in SSC but no luck.  I've changed the registry key from 1 to 0.

The dword value always change back to 1.

if your clients are communicating with server then they will revert the values as they are reading the settings from parent servers
You are trying to change this setting for clients or secondary server?  

try this

Restricted users cannot run LiveUpdate under Windows 2003/XP/2000

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2000100614565548?Open&src=tranus_ent_sl

I have that enablealluser setting on the secondary server. I've also tried change the setting on the secondary server but to no luck, it too is reverted back.

there must be trigger or flag that is reversing these registry changes. Any ideas?

 you are trying to do this for a server or for a cleint?
open ssc
tools
symantec system center options
clients tab
check allow direct configuration of clients
now in ssc select the client and check liveupdate options
i think your clients are in client groups, if they are in client groups all the settings will be overridden...

http://service1.symantec.com/support/ent-security.nsf/docid/2002083007264348?Open&src=tranus_ent_br
 

you are trying to do this for a server or for a cleint?  Server.

I checked the SSC options on the server and it is checked for "allow direct config..."

is this server inside any client groups?
in SSC do you have any client groups? 

server does not have any client groups nor does the SSC.

If i uncheck the "do not allow client to manually launch liveupdate", which regkey does it hit?

Is it this regkey?
hklm\software\intel\virusprotect6\currentversion\domaindata\clientconfig\pattermanager

its this key
Lockupdatepattern             dword value is 1 

Is the regkey hitting under this path hklm\software\intel\virusprotect6\currentversion\domaindata\clientconfig\pattermanager?

Or the hklm\software\intel\virusprotect6\currentversion\patternmanager?

Or should it hit both values?

domain data is for server
currentversion is for client, are u able to make the changes to registry now  ?