How to disable 'Enable Application and Device Control' option within Client Management Settings

Products

• Endpoint Protection

Issue/Introduction

How to disable 'Enable Application and Device Control' option within Client Management Settings where you can check or uncheck this option in the local SEP interface.

'Enable Application and Device Control' from the SEP client's interface:
 

 

Resolution

Users are allowed to disable Application & Device Control manually by unchecking this available option by default. To configure if this option is available or not, follow these steps:

1. In the Symantec Endpoint Protection Manager (SEPM) Console, select: 
   • Clients > {Highlight the specific group applicable - My Company / Default Group} > Policies tab
2. Expand the Location-specific Settings:
   • By clicking on the (+) Plus sign, you will expand to see: 
   • Client User Interface Control Settings
3. From 'Client User Interface Control Settings' 
   1. Click Tasks>> Edit Setting
   2. If Server Control mode is chosen:
      1. Click Customize ... button
      2. From section => Proactive Threat Protection, Uncheck 'Allow user to enable and disable the application device control'
      3. Click [ OK ] button
   3. If Mixed Control mode is chosen:
      1. Click Customize ... button
      2. Click 'Client User Interface Control Settings' tab
         {Similar options are displayed as was seen in the Server Control mode window}
      3. Uncheck 'Allow user to enable and disable the application device control'
      4. Click [ OK ] button