Endpoint Protection

Hi,

Anyone can suggest me on follwing point that how we can set admin right at client (user machine like laptop, desktop)

1. If users have admin right but we want they can only fire update and scan policy but can not disable the SEP

2. Can we create a password that uses by client only  If user are out of company's network and when he comes in company network only he only can update and scan at his end.

Please provide your valuable comments

Thanks in advance to all.

1. No. If you don't want users to disable SEP than close all locks in the various policies and add password protection.

How to block a user's ability to disable Symantec Endpoint Protection on Clients

2. If you add a password, they will not be able to open the SEP GUI to perform these actions.

Hi praveen, It doesn't matter if users have admin rights or not, if you follow below article your users can not disable SEP! According to the hearbeat settings clients will take the policies and definitions - https://support.symantec.com/en_US/article.TECH166238.html Your another question - Follow below article for setting password for your sep clients - https://support.symantec.com/en_US/article.HOWTO81235.html

Thanks to both of you but my question is that can we hide the option of disable Symentics Endpont Protection at user machin in tray icon ,who have admin right . I have uploaded the image for reference please provide your valuable reply.

 

Thanks

Hi pravin, You can not hide the disable option but if you follow above article any user will not be able to disable the SEP because the same "disable option" will be grayed out in the system tray. So it won't be clickable.

Yep, just follow this article to hide it:

Hiding and displaying the notification area icon on the Symantec Endpoint Protection client

HI,

Thanks Brian For your help fir hiding the client user interface.

And Thanks nThakare for comments.

I request to both of you please tell me how we can perform the action for grayed out " disable option" in system tray of a user who have admin right.I have tried but still have same problem. And i have followed the above article you shared. 

Go ahead with this article, it shows how to gray out 'disable Sep" option https://news.entsupport.symantec.com/connect/es/articles/how-disable-sep-features-client-gui-sep?page=1

Thanks nThakare.

All lock icons need to be closed in the various policies:

How to block a user's ability to disable Symantec Endpoint Protection on Clients

 

Did you ensure this has been done? 

Welcome pravin