[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 608
  • Last Modified:

Symanec end point protection 11.5

Hi all,

 I have symantec end point installed , Im blocking the USB . Cd, etc using it. Also I have put a password to protect it so no one can uninstall it. I found that someone is using some symantec tools to remove it. I need some advises in how to deny such cases.

2 Solutions
John HurstBusiness Consultant (Owner)Commented:
There is Symantec Removal tools that will remove Symantec (for use with problem issues) and it will remove Symantec even when there is a password.

But you need to be adminstrator to run these removal tools, so make sure the users are in the normal (restricted) category and that no one (unexpected) does not have the admin passwords.

.... Thinkpads_User
Sudeep SharmaTechnical DesignerCommented:
You should try and find the tools that they are using to remove it.

Further you should make use of Application and Device Control policy and deny the access to Symantec folders/files and registry to be accessed or deleted.

Check below articles for more details:

About the structure of an Application and Device Control policy

Creating custom application control rules

Typical application control rules

Creating a custom rule set and adding rules

I hope that would help


Featured Post

Cyber Threats to Small Businesses (Part 1)

This past May, Webroot surveyed more than 600 IT decision-makers at medium-sized companies to see how these small businesses perceived new threats facing their organizations.  Read what Webroot CISO, Gary Hayslip, has to say about the survey in part 1 of this 2-part blog series.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now