Endpoint Protection

SEPM 12.1.6 RU6 MP5

Windows Server 2012

I need to prevent Live Update from running on a servers in a highly secured environment ... I am using .JDB files to update them currently.  With the version of SEPM, is it still possible to use scm.server.liveupdate.disabled=1 to <SEPM installation folder>/tomcat/etc/conf.properties file:

When the value “scm.server.liveupdate.disabled=1” is added to the file and saved, the LiveUpdate function will be skipped at current SEPM server.  You should add this value to each SEPM server's conf.properties file that you wish to limit or disable running of LiveUpdate process.  This gives you control over which SEPMs will randomly be selected to run LiveUpdate.  To bypass the randomization you should add the value to all but one of the SEPMs in the site that you desire to run the LiveUpdate process.

Regards!  

I've seen otherwise for 12.1 so it should still be good to use.

That will disable liveupdate from running for Symantec endpoint protection Manager ( SEPM) console only

For SEP clients the updates are based on heartbeat settings.