Endpoint Protection

I hav upgraded SEPM to 11.0.6005 version yesterday and then my client has reported that i have to restart my PC to enable Application and Device Control policy. This policy is disabled for all groups, because one of our applications throws errors with that policy. So it seems that after an upgrade this policy is enabled again. I think it shouldn't, so i hope this will be fixed in the next versions. Upgrade was just on top of the older SEPM version.

I was leery of this before I upgraded. I had seen some people post exactly what you just posted. Before I upgraded to RU6a, I went in and disabled the policy altogether because it was enabled however not actually being used. Then I upgraded. It did not re-enable and all was well.

Did you select upgrade groups with package feature?
if then you need to select the option maintain the existing feature set; this would install what you had earlier
seems like u selected all the packages hence it installed application and device control also.

This document appears to relate to the issue.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2010050612450248

Regards.

This document looks like related. Though in my case this policy was enabled only once after the upgrade to RU6a and as far as i see this policy is not enabling itself anymore. So it was a one time issue just after the upgrade.

Rafeeq, i havent selected any packages or settings because i have upgraded only SEP Manager. All clients still use older version.