Symantec Endpoint Protection on Windows 11 Dev Driver feature (ReFS technology)

Products

• Endpoint Protection

Issue/Introduction

Is Symantec Endpoint Protection compatible with Windows Dev Driver feature?

Environment

Windows 11 Dev Driver feature https://learn.microsoft.com/en-us/windows/dev-drive/ 

Resolution

By default, Filter Manager will turn OFF all filters on a Dev Drive, with the exception of antivirus filters. By default, AP (srtsp) and EECtrl (Eraser) filters are attached when SEP is installed.

Workaround:

BASH, SymEFA and SymEvnt filters need to be manually attached to DevDrive.

Command to attach the filters manually - fsutil devdrv setFiltersAllowed /volume G: BHDrvx64,SymEFASI,SymEvnt

 

 

Additional Information

A Feature Request was raised to have these drivers attached automatically to the Dev Drive.