Uncheck the tamper setting under client management.
How to disable Tamper Protection in Symantec Endpoint Protection 12.1
Article:TECH192023 |
| |
Created: 2012-06-29 |
| |
Updated: 2014-03-27 |
| |
Article URL http://www.symantec.com/docs/TECH192023 |
Enabling, disabling, and configuring Tamper Protection in Endpoint Protection on unmanaged Clients
Article:TECH102688 |
| |
Created: 2007-01-18 |
| |
Updated: 2010-11-15 |
| |
Article URL http://www.symantec.com/docs/TECH102688 |
##edit##
Setting from unmanage client
- Open SEP
- Click Change Settings
- Click Configure Settings (next to Client Management)
- Click the Tamper Protection tab
- Perform one of the following actions:
- Uncheck Protection Symantec security software from being tampered with or shut down. This disables Tamper Protection.
- Change the dropdown menu to Log only. Note: This setting leaves Tamper Protection enabled, however, Tamper Protection will no longer block attempts to modify SEP's files, folders, processes, and Registry values.
- Click OK. Tamper Protection is now disabled for this SEP client.
How to disable Tamper Protection within the Symantec Endpoint Protection Manager (SEPM) Enterprise Edition console:
Note: This option is best if you need to disable Tamper Protection for a large number of clients.
- Open the SEPM console
- Click Clients
- Select the client-group you want to modify
- Click the Policies tab
- Click General Settings
- Click the Tamper Protection tab
- Perform one of the following actions:
- Uncheck Protection Symantec security software from being tampered with or shut down. This disables Tamper Protection.
- Change the dropdown menu to Log only. Note: This setting leaves Tamper Protection enabled, however, Tamper Protection will no longer block attempts to modify SEP's files, folders, processes, and Registry values.
- Click OK. Tamper Protection will be disabled for clients within this client-group and clients within client-groups which inherit policies from this group as soon as they receive the updated policy from the SEPM.