You need to determine the exceptions made on the Symantec Endpoint Protection Manager (SEPM) are accurately being adhered by the Symantec Endpoint Protection (SEP) client.
The following steps walk you through the process to use SymDiag to validate client exceptions are applied.
1. Run "SymDiag.exe -s -prod epclient -forsupport"
2. Run "SymDiag.exe -accepteula", go to File > Open Report, open the SDBZ file created from step 1.
3. Go to Information > Endpoint Protection Client, either scroll down, or search Ctrl + F for Exceptions.