Symantec Endpoint Encryption policies that can only be changed through reinstallation.

Products

• Endpoint Encryption

Issue/Introduction

You would like to know which settings for Symantec Endpoint Encryption 7.0.x are changed by policy, upgrade, and/or installation.

Resolution

While the majority of the client settings are specified when creating the client installation packages and updated later by policy, there are exceptions:

• Certain client settings can only be specified in the client installation package.
• Other client settings can only be set by policy.
• Most settings in the client upgrade package are ignored, but some are honored.

Atypical Client Settings Itemized

Product/Component	Panel Name	Panel Area/Field Label	Installation	Upgrade	Policy
Framework	Client Administrators	All	Yes	Yes*	Yes
Framework	Registered Users	All	Yes	Yes†	Yes
Framework	Registered Users	Require registered users to authenticate with password or token	No	No	Yes
Framework	Communication	Communication Information	Yes	Yes	No
Framework	Encryption	All	Yes	No	No
Full Disk	Startup	All	Yes	Yes‡	Yes**
Full Disk	Encryption	Advanced Options	Yes	No	No
Full Disk	Installer Customization	All	Yes	No	No
Full Disk	Autologon	All	No	No	Yes
Full Disk	Remote Decryption	All	No	No	Yes
Full Disk	One-Time Password	OTP Communication Unlock	No	No	Yes

* Only if the target client is being upgraded from SEE Framework 6.0.0.
† Only if the method of authentication specified when installing the Manager Console that created the original client installation package is different than the method of authentication specified when installing the Manager Console that created the upgrade package.
‡ Only if the client already had a custom image and the upgrade package contains a different custom image.
** Only if a custom image is in place and the policy specifies a return to the default.