Configure the Symantec Endpoint Protection 14.x client to include "Core Files" only.

Products

• Endpoint Protection

Issue/Introduction

The "Core Files" configuration modifies the Symantec Endpoint Protection (SEP) client to a base level installation by uninstalling sub features of the client. This configuration is used in troubleshooting to determine if an issue is still present after removal of the SEP client sub features. If the original issue is not present after configuring the SEP client to "Core File" only, then component isolation troubleshooting is used to determine the component(s) of the SEP client where the issue is reproduced. 

 

Component isolation instructions are found in this document: Component Isolation steps for Endpoint Protection and Endpoint Security

Resolution

Note: When testing with this configuration, please ensure that the original SEP client sub features and settings are restored after the "Core Files" only testing is concluded, as this configuration does not provide any protection.

Method 1 (configuration to modify all of the SEP client sub feature components):

1. Select "Start", then "Run".
2. Type "appwiz.cpl" and press "Enter".
3. Highlight the entry for "Symantec Endpoint Protection", and select "Change".
4. Follow the prompts until you get to the screen showing the options to Modify, Repair, or Remove. 
5. Select "Modify"
6. Modify all of the installed SEP client components, except the "Core Files", by selecting the drop arrow and selecting, "Entire feature will be unavailable", (screenshot example shows the modification of the Network and Host Exploit Mitigation sub feature).
   
7. Restart the computer. Once the computer is restarted, the SEP client will be in the "Core Files" only configuration.

Method 2 (configuration to modify individual SEP client sub feature components):

1. Open the "Control Panel" and select "Programs" > "Programs and Features".
2. Find "Symantec Endpoint Protection", select that then right-click, then select "Change". Follow the prompts until you see the window with the option to "Modify". Select "Modify".
3. Modify the individual component(s) requested by the SEP engineer by expanding the component and selecting the desired option.

    4. Once finished, restart the computer. Once the computer is restarted, the SEP client will be in the "Core Files" only configuration that includes only client sub feature components that were not removed.