how to stop symantec endpoint protection to check usb poicy

Repeat this procedure for all installations of Symantec Endpoint Protection Manager.īeside above, how do I disable Symantec Endpoint Protection without admin rights? Go to change settings > tamper protection.In the Services window, under Name, scroll to and right-click Symantec Endpoint Protection Manager.Click Start > Settings > Control Panel > Administrative Tools > Services.Click once on the ' Disable Symantec Endpoint Protection' option, from the drop-down menu. This will force SEP to check in with the server and download the new policy to remove the USB restrictions.Disable Endpoint Protection temporarily by right-clicking on the Symantec's Gold Shield icon, located on the Windows system tray area. To help speed up the policy change on the client PC, right click on SEP Icon and select “Update Policy”. (Personal I would run this once a week anyways) Once the sync has completed, check that the client device has been moved into the Enable USB OU in SEPM. When its been moved and replication across the DC’s has happened a sync with Active Directry needs to be forced within SEPM.

Next, you need to add the client device to the “Enable USB” Organisational unit in Active Directory. Or you can create a new policy with no restrictions and call its USB bypass. Now in the Symantec Endpoint Protection Manager Console, you will need to apply the default “Application and Device Control Policy (if you haven’t modified it after the SEPM install) to the “Enable USB” organisational unit within SEPM.

And to allow this, In Active Directory, we have created a new organisational unit under each Computer organisational unit and called it “Enable USB” You will no doubt come across the need to allow a specific client full access to all USB/Devices wile keeping the policy applied to the remaining clients on the network.

How to stop symantec endpoint protection to check usb poicy