search cancel

How to verify Host Integrity status via the registry


Article ID: 161010


Updated On:


Endpoint Protection


There needs to be a way to verify the status of Host Integrity via the registry.


For SEP clients older than 14.3 RU5 the registry value: "HIEngineResult" can be used to determine the current status of Host Integrity.

32-bit: [HKEY_LOCAL_MACHINE\Software\Symantec\Symantec Endpoint Protection\SMC]
64-bit: [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Symantec\Symantec Endpoint Protection\SMC]
HIEngineResult = 0 (No HI policy assigned)
HIEngineResult = 1 (HI Check Pending)
HIEngineResult = 2 (HI Check Passed)
HIEngineResult = 3 (HI Check Failed)


Starting from SEP version 14.3 RU5 the same registry value can be checked in HKEY_LOCAL_MACHINE\Software\Symantec\Symantec Endpoint Protection\SMC, even though the system is 64 bit.