Endpoint Protection

Hi.

If we set a Application and Device control policy to notify users if the device is blocked a balloon message will popup in the system tray.

Thing is, under Windows 7, the user can potenitally go into the notifications settings and hide notifications and thus users don't see the balloon.

Is there anyway anybody knows of, of enforcing the notifcation either through the Symantec management or Windows?

In Windows it should be controllable using Group Policy.

....but I cannot find any group policy that will enforce a particular system tray icon.

Does anybody have an idea on how I may achieve this?

Are you using device control for blocking ?If yes edit application and device control policy go to devise control down side you will get one option as "notify user when device is blocked" just uncheck it.

If you are using application control this option you will get in action tab while editing that particular policy ......