While scanning, messages appear in scan window: "Not fully scanned"/"Did not have permission to open the file"

Products

• Endpoint Protection

Issue/Introduction

While scanning, the Symantec Endpoint Protection for Macintosh user interface displays what appear to be error messages for files, showing a Status of "Not fully scanned" and a Comment of "Did not have permission to open the file".

Cause

This is commonly seen for hidden or protected files owned by Root, with or without restricted privileges (such as -rw-------).

Resolution

For any file returned with this message, highlighting the file name in the Scan Results portion of the window will show you where the file is, its size, and when it was last modified. These alerts can be turned off for scans with the SEP for Macintosh client.

For Computers running SEP for Macintosh (Managed or Unmanaged):

To prevent permissions errors from appearing in scans with the SEP for Macintosh client:

There are no preference settings within the Symantec Endpoint Protection Manager or the Symantec Endpoint Protection for Macintosh user interface to prevent permissions errors from appearing in scan results. However, ignoring permissions errors can be enabled by manually setting the preference.

1. Open the Terminal Application (located within /Applications/Utilities)
2. At the command line, type the following to set the preference for the user who is currently logged in: defaults write /Library/Preferences/com.Symantec.NAVX IgnorePermPref -bool YES