Endpoint Protection

 View Only

  • 1.  SEPM report for finding which user disabled AV

    Posted Apr 10, 2018 12:43 AM

    is it possible to get a report showing which user disabled AV on a machine?

     

    tried to google it but didnt find much :S



  • 2.  RE: SEPM report for finding which user disabled AV

    Posted Apr 10, 2018 12:57 AM
    No , not possible as of now, however you can disable the users ability to disable symantec


  • 3.  RE: SEPM report for finding which user disabled AV

    Posted Apr 10, 2018 12:59 AM

    No , not possible as of now, however you can disable the users ability to disable symantec

     

    https://support.symantec.com/en_US/article.TECH102822.html



  • 4.  RE: SEPM report for finding which user disabled AV

    Posted Apr 10, 2018 07:08 AM

    SEPM doesn't report on this nor is there alerting that can be setup. Put in an enhancement request.