This issue needs a solution.

SEP - User Mode - Can you Explain? Want to link a Device control Policy.

Created: 17 May 2010
Login to vote
0 0 Votes

Hi, the annoying one is here again!!

Currently our whole SEPM environment is in computer mode and working nicely.

One overseas office would like to implement USB blocking on user basis, not per comptuer.

How would I switch these clients to user mode?  I am guessing I would need all the computers they currently use and then righr-click change to user mode?  am I correct?

What other things do I need to consider?  I currently have the USB block (device conrol) policy fine based on copmputer mode - how to make it for user mode???

Thank You
*confused*

Filed Under

Comments

Koosah's picture
Koosah
Symantec Employee
17
May
2010

If you switch a machine from

If you switch a machine from computer mode to user mode the same exact policies apply to the user that is logged in that applied to the computer previous.

Title: 'Understanding computer and user mode in Symantec Endpoint Protection 11.0'

Document ID: 2007101809192448

> Web URL: http://service1.symantec.com/SUPPORT/ent-security....

Symantec Technical Specialist

Please don't forget to mark which thread solved your issue!

18
May
2010

So would I be right in

So would I be right in assuming, if a new user logs onto that machine, they will appear in SEP?

Will they show up multiple times (one per device), or would they show uop as single user?

Doesn;t this complicate support?

Koosah's picture
Koosah
Symantec Employee
18
May
2010

Yes, if a new user logs into

Yes, if a new user logs into the machine they will show up in that group. They will show as a single user. User mode is not used very much, it is definitely more complicated but if your used to it,  its manageable .

Symantec Technical Specialist

Please don't forget to mark which thread solved your issue!

Koosah's picture
Koosah
Symantec Employee
18
May
2010

I would recommend you import

I would recommend you import active directory users and apply them to groups for this situation to work the best.

Symantec Technical Specialist

Please don't forget to mark which thread solved your issue!