Endpoint Protection

 View Only

  • 1.  Doubts about system lockdown

    Posted Oct 09, 2017 03:28 PM

    Hi folks,

    We are planning to implement System Lockdown in our clients and we are with some doubts:

    1. System lockdown can be implemented only by group or it can be implemented individually by machine ?

    2. System lockdown can be implemented without a SEPM Console, directly on the client ?

    3. In an emergency can System Lockdown can be disabled on the client ? (Some emergencial cases where the given application is not on the whitelist, need to be executded, and the user can't wait a change on the console)

    Our enviroment:

    Symantec endpoint protection SEP and SEPM version 12.1.5

    Clients:

    Windows XP,

    Windows 7

    Windows 2008

    Windows 2012

    Thank you!

    Giordano Abreu

     



  • 2.  RE: Doubts about system lockdown

    Posted Oct 09, 2017 03:31 PM

    To answer:

    1. It can be done individually if you create a group and move that specific client into it. Can be tedious to do it this way.
    2. No. A SEPM is required in order to implement System Lockdown.
    3. System Lockdown requires the application and device control component. If this component is disabled or removed, it should also disable System Lockdown.