Hello All,

I got a requirement where I need to block a specific registry key from being modified, even by local administrators, example: HKLM\Software\Test1234. People can read its contents but cannot change it.

Is there a way to attend such requirement with SEP? In which versions I can do it and where?

Thanks for your help.

Regards,

Bruno

Yes you can use ADC for that

About Application and Device Control Rule Set: "Protect client files and registry keys"

https://www-secure.symantec.com/connect/forums/registry-keys-application-control-rules

Check this

Using Application and Device Control in Symantec Endpoint Protection (SEP) to block activity in common loading points for threats