Video Screencast Help
Protect Your POS Environment Against Retail Data Breaches. Learn More.

SEPM12.1 - Antivirus

Created: 06 Dec 2012 • Updated: 20 Dec 2012 | 9 comments
This issue has been solved. See solution.

Do we have any planning in next version for user based policy. i.e currently if i need to block usb it is based on the computer and this is not a standard practise. can we apply user base policy in SEPM12?

Regards,

Dilip Patel

Comments 9 CommentsJump to latest comment

W007's picture

The better way is to set up all computers in "User Mode".

Administration Guide for Symantec Endpoint Protection and Symantec Network Access
> Section 1. Basic Administrative Tasks
> Setting up your organizational structure
> Understanding users and computers & Managing Users and Computers

The policies are then set depending on the user that has logged into the machine

 

Check this thread

https://www-secure.symantec.com/connect/forums/sep-user-mode-can-you-explain-want-link-device-control-policy

https://www-secure.symantec.com/connect/forums/configuring-usb

https://www-secure.symantec.com/connect/forums/customizing-usb-storage-access-end-users-symantec-endpoint-protection

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Dilippatel's picture

please consider below two points:

1. MY SEPM is not interagreted with AD

2. we dont wont to apply user based policy on all computer or group.

we dont wont to apply user based polcy on spacific group only.

pete_4u2002's picture

the existing version has the feature you looking for. you need to set user mode.

Rafeeq's picture

This feature already exists

You can have the clients in User mode or Computer mode.

Check this document for more Information.

 

About user mode and computer mode

 

http://www.symantec.com/business/support/index?pag...

James007's picture

Yes i agree above comments.

this feature already exits in sepm

Switching a client between user mode and computer mode

http://www.symantec.com/docs/HOWTO80734

About user mode and computer mode

 http://www.symantec.com/docs/HOWTO27008

Dilippatel's picture

please consider below two points:

1. MY SEPM is not integrated with AD

2. we don't wont to apply user based policy on all computer or group.

we do not wont to apply user based policy on specific group only.

 

W007's picture

Assigning clients to groups before you install the client software

http://www.symantec.com/business/support/index?page=content&id=HOWTO80732#v11094164

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

AravindKM's picture

As far as I understand, blocking USB through group policy will be better in your scenario. Because even though it is possible keeping some clients under user mode and some other under computer mode, it is not advisable.

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

SOLUTION
James007's picture

HI Dilip,

I hope your have received your answer ?

Please don't forget to mark your thread solved with whatever answer helped you : )