How to allow user to manage quarantined files in Symantec Cloud
Article ID: 259391
Updated On:
Products
Issue/Introduction
User wants to restore a quarantined file from the SES console and give the permission to another user to restore file from the SEP Client
Environment
Release:
SES Build 1.0.27.149 and below
SEP above 14.3 RU 1
Resolution
1. In https://sep.securitycloud.symantec.com go to Policies
2. Navigate to Default System Policy
3. Scroll down to Tamper Protection
4. Temporarily disable this policy for a given group of clients
5. Update the policies on the client
6. Execute registry editor (regedit) as administrator on the client
7. Navigate to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\Quarantine
8. If not present create AllowUserManageQuarantinedFiles REG_DWORD 32 bit value
9. Set AllowUSerManageQuarantinedFiles to 1
10. Open SEP Client and go to View Quarantine
11. Restore and manage file as needed
12. Re-enable the tamper protection in Default System Policy
Attachments
Feedback
