Endpoint Protection

Hello,

I discovered that a user with local admin rights can easily stop the SNAC 12.1 service !

I didn't find any way to protect this such as it exists for the Antivirus and firewall for example...

Is there a solution to prevent this ?

Thanks in advance.

Hi,

Check this fourms..

https://www-secure.symantec.com/connect/forums/sep-121-normal-users-cannot-disable-firewall

To prevent user from disabling SEP features check following article

https://www-secure.symantec.com/connect/articles/how-disable-sep-features-client-gui-sep-121

Public KB also available 

http://www.symantec.com/business/support/index?page=content&id=TECH168990

Windows User Accounts without Administrative Privileges Cannot Disable the Firewall in Symantec Endpoint Protection 12.1, Even if "Allow User to enable and disable firewall" is Enabled

http://www.symantec.com/business/support/index?page=content&id=TECH170246

Hello,

thanks for your help but not any documents describe the procedure to prevent SNAC disabling when admin. Is it really impossible ?

Regards

Yes, you can't protect SNAC Service.

Only Admin person having Stoped and start rights.

Bad news... We had the same issue for Firewall before MP1...

Hope this will be fixed in the MP2...

Thanks

hi Xtof,

I have raise IDEA for same.

https://www-secure.symantec.com/connect/ideas/protect-snac-services