Endpoint Protection

 View Only
  • 1.  Tamper Protection Alert off after a reboot (UPhclean)

    Posted Jun 14, 2012 05:53 AM

    I have the following problem: I tune Tamper Protection Alert - off. After rebooting again turned on. I do not find in the policy settings in the console where it is turned off for all orgunit which are servers 2003.

    Sorry for my english



  • 2.  RE: Tamper Protection Alert off after a reboot (UPhclean)

    Posted Jun 14, 2012 07:07 AM

     

    • Выключите функцию защиты от изменений:
      1. Откройте вкладку Клиенты.
      2. Выберите группу клиентов для изменения.
      3. Откройте вкладку Политики.
      4. Если группа отлична от глобальной, то отмените выбор переключателя Наследовать политики и параметры из родительской группы. Убедитесь, что в поле "Наследование политики" указано значение Выкл.
      5. В области параметров найдите раздел Политики и параметры, независимые от расположения и выберите Общие параметры.
      6. Откройте вкладку Защита от изменения.
      7. Отмените выбор пункта Защита программ обеспечения безопасности Symantec от изменения или завершения.


  • 3.  RE: Tamper Protection Alert off after a reboot (UPhclean)

    Posted Aug 07, 2012 12:57 AM

    hi

    turned off tamper Protection is wrong but you can Create a Centralized Exception to exclude UPHClean.exe from being detected

    Situation:    Why does Tamper Protection show a warning when using UPHClean.exe

     

    Solution: Create a Centralized Exception to exclude UPHClean.exe from being detected

     

    Creating an Exception

    Log into the Symantec Endpoint Protection Manager and click Policies .

    Under View Policies click Centralized Exceptions.

    If you have a Centralized Exceptions policy, edit the policy. Otherwise, follow step 4 to create it.

    Under Tasks click Add a Centralized Exception policy... This will create and open a new Centralized Exceptions Policy.

    In the left pane, click Centralized Exceptions.

    Click the Add button to open a drop-down menu. Move the cursor over Tamper Protection Exception and select it.

    Enter the full path to the file name: UPHClean.exe, in the File field. If you enter the Prefix variable you must also enter the full path to the file in the File field.

    Save the policy by clicking OK and make sure it is assigned to the appropriate client groups

     

    best regrads. 



  • 4.  RE: Tamper Protection Alert off after a reboot (UPhclean)

    Broadcom Employee
    Posted Aug 07, 2012 05:53 AM

    Hi,

    Check this public article for more details:

    Tamper Protection is detecting UPHClean.exe.

    http://www.symantec.com/docs/TECH105952