Endpoint Protection

Hi,

Is there any way to find out the policy serial no. of SEP client, if we have already disabled the SEP client icon from SEPM. We have disabled it so that user is not able to disable the sep by hiself/herself. So, is there any way that we can find out the Policy serial no. or group name of sep client among the SEP files, present in system.

Thanks in Advance.

You can still open the client GUI by going to the All Programs menu or navigatign to C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\<version number>\Bin and opening SymCorpUI.exe

Look in the registry at:

if x64

HKLM\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink

Check the Serial Number entry. It will show the policy on the client.

Getting this message. "The network administrator has disabled the main user interface". 

Is there any way that we could find out the policy serial no. or group name of sep client without peeping into sep GUI interface.

Look in the registry at:

if x64

HKLM\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink

Check the Serial Number entry. It will show the policy on the client.

In fact, this entire section shows a wealth of info, group as well.

You can search the client entry from sepm.

Login the console go to client tab.

Right client on my company under client and search the client enrty

Fromthere you can find it.

After open the entry, all information of the client which you require is avaialble there.

@.Brian - Didn't find SYLINK there or any info regardin Policy serial number or group name for sep client.

@AJ_01 - Hi AJ, I want to have this info from client machine only not from SEPM. Appreciate your answer.

Is this a 32 or 64 bit machine?

If 32 bit, take out the Wow6432Node path

If 64 bit, the path I posted is correct

Otherwise, you can copy the policy number in the SEPM and do a search of the client registry for it. It will show up that way