Computers that have Symantec Endpoint Protection 12.1 with the Application and Device Controlled component installed will experience disabled NICs re-enabling themselves when the smc -stop command is issued. 

During the smc exit, Application and Device Control will re-enabled all disabled devices.

Symantec is aware and is investigating this issue. This document will be updated as more information is available.

Workaround:

• Uninstall Application and Device Control

Applies To

• Windows 7
• Symantec Endpoint Protection 12.1 client with Application and Device Control component
• Issue manifests when smc -stop command is issued