Endpoint Protection

Hi, the annoying one is here again!!

Currently our whole SEPM environment is in computer mode and working nicely.

One overseas office would like to implement USB blocking on user basis, not per comptuer.

How would I switch these clients to user mode?  I am guessing I would need all the computers they currently use and then righr-click change to user mode?  am I correct?

What other things do I need to consider?  I currently have the USB block (device conrol) policy fine based on copmputer mode - how to make it for user mode???

Thank You
*confused*

If you switch a machine from computer mode to user mode the same exact policies apply to the user that is logged in that applied to the computer previous.

Title: 'Understanding computer and user mode in Symantec Endpoint Protection 11.0'

Document ID: 2007101809192448

> Web URL: http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007101809192448?Open&seg=ent

So would I be right in assuming, if a new user logs onto that machine, they will appear in SEP?

Will they show up multiple times (one per device), or would they show uop as single user?

Doesn;t this complicate support?

Yes, if a new user logs into the machine they will show up in that group. They will show as a single user. User mode is not used very much, it is definitely more complicated but if your used to it,  its manageable .

I would recommend you import active directory users and apply them to groups for this situation to work the best.