You would like to determine whether the client is managed by the on-premises Symantec Endpoint Protection Manager (SEPM), a combination of SEPM and the cloud server (hybrid), or fully cloud-managed.
Look at the values in the following registry keys:
[HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection]
"CloudManaged"=dword
[HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC]
"CloudEnrolled"=dword
Management Type |
CloudManaged |
CloudEnrolled |
Cloud |
1 |
1/0 * |
Hybrid |
0 |
1 |
SEPM |
0 |
0 |
*The client is fully cloud-managed and not enrolled.
Go to the following registry key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\Common]
“LicensePath”=sz
This key exists only for on-premises or hybrid management.