


Once the policy has been updated the option to Disable Symantec Endpoint Protection will be grayed-out.The enterprise perimeter today is more distributed than ever, and securing it requires a strong understanding of the adversary and the evolving attack landscape. The client will request the new policy from the manager.

Right-click the Symantec Endpoint Protection system tray icon. Once the policy has been updated the option to Disable Symantec Endpoint Protection will be grayed-out when users right-click the Symantec Endpoint Protection system tray icon. The client will receive a prompt to heartbeat and update its policy. This step is not necessary as clients will receive the policy during their normal check-in

Step 2: Remove the right to disable Threat detection:Ĭlick File System Auto-Protect, then "lock this feature" by clicking the lock symbol next to Enable File System Auto-Protect.Ĭlick Internet Email Auto-Protect, then "lock this feature" by clicking the lock symbol next to Enable Internet Email Auto-Protect.Ĭlick Microsoft Outlook Auto-Protect, then "lock this feature" by clicking the lock symbol next to Enable Microsoft Outlook Auto-Protect.Ĭlick Lotus Notes Auto-Protect, then "lock this feature" by clicking the lock symbol next to Enable Lotus Notes Auto-Protect.Ĭlick Proactive Threat Scan, then "lock this feature" by clicking the lock symbol next to Scan for trojans and worms and Scan for keyloggers. Uncheck Allow users to enable or disable Network Threat protection. If Mixed control is enabled this will open the Client User Interface Mixed Control Settings dialog. If Server control is enabled this will open the Client User Interface Settings dialog. Select Server control or Mixed control if it is not already set to one of these. Select the group that contains the clients you want to be affected.Ĭlick Tasks to the right of "Client User Interface Control Settings", then click Edit. Open the "Symantec Endpoint Protection Manager." Step 1: Remove the right to disable Network Threat Protection: To prevent users from disabling Symantec Endpoint Protection on their client: How to prevent users from disabling Symantec Endpoint Protection by right-clicking on the client system tray icon and selecting "Disable Symantec Endpoint Protection"? How to block user's ability to disable Symantec Endpoint Protection on Clients Please kindly advice additional Procedures not written below. Just to add, we are using MR4MP1a and the users profiles are not admin accounts. I had used the directions below to block the user's ability to disable Symantec but the users could still disable Symantec.
