Disabling the LiveUpdate option on unmanaged Endpoint Protection client

Products

• Endpoint Protection

Issue/Introduction

You want to disable the LiveUpdate button within the unmanaged Symantec Endpoint Protection client user interface so that users can not run LiveUpdate by clicking that button.

This procedure is for unmanaged Symantec Endpoint Protection clients only. Disabling this button on managed Symantec Endpoint Protection clients should by done by modifying the client's policy on the Symantec Endpoint Protection Manager.

Resolution

Follow the below steps to disable the LiveUpdate button within an unmanaged Symantec Endpoint Protection client's user interface.

Note: Symantec recommends that you backup the Windows Registry before proceeding.

1. Click Start
2. Click Run
3. Type in: regedit
4. Click OK
5. In the Registry Editor go to: HKEY_LOCAL_MACHINE\SOFTWARE\SYMANTEC\SYMANTEC ENDPOINT PROTECTION\LIVEUPDATE.
6. In the right pane, locate the String Value AllowManualLiveUpdate
   1. If the String Value AllowManualLiveUpdate is not present, then you need to create it. You can do this by right-clicking in a blank area of the pane, clicking New, and clicking DWORD Value. Name the new value AllowManualLiveUpdate.
7. Double click AllowManualLiveUpdate and change the Value data to 0
8. Click OK
9. Close the Registry editor
10. Open the SEP client GUI and verify that the LiveUpdate button is disabled.

Should you ever want to enable access to the LiveUpdate button with the unmanaged Symantec Endpoint Protection client user interface, you may modify the AllowManualLiveUpdate registry key and change the Value data to 1.

 

Note: Tamper protection needs to be disabled before changing/adding the registry. 

Reference : Disable Tamper Protection