how to disable symantec endpoint protection temporarily

I'm currently doing the same thing, ratcheting down the settings on a group of 'Problem' users and watching the effects. However, this solution worked very well for me. I am not guaranteeing good results for anyone and I am not guaranteeing that you won't see a negative impact. After a few days of doing this, I applied the change to all workstations. I was scared at first to make these changes because I anticipated that client performance would suffer, so I initially pushed these changes only to IT people. What is the side effect? Much lower number of rebuilds and cleans due to viruses. However, the biggest improvement was when I changed settings in the AV policy. I also suggest keeping adobe acrobat reader patched. Set 'when a trojan or worm is detected.' to Terminate. In Actions tab in File System Auto-Protect, make same setting changes to Security Risks that I described above (Delete or Quarantine).įor all protections, change Actions setting for Security Risks to Delete first then Quarantine (Internet email, Outlook etc).ĭeselect 'Use defaults defined by Symantec'.

Scan Details tab - Advanced Scanning and Monitoring button -> Enable Bloodhoud and set level to Maximum. In that same tab make sure 'Terminate processes automatically' and 'Stop services automatically' are checked.

For all Security Risks, choose Delete Risk as first action and Quarantine if first action fails. Įxit Advanced Scanning Options, change from Scan Details to Actions. Second I made the following changes in the AV policy:Īdvanced Scanning Options button -> Storage Migration tab -> Scan all files, forcing demigration (fills drive). I thought I would share with what we did to achieve this.įirst, before I enabled more aggressive settings, my company spent two months coming to an agreement on a new version of the JRE and then deploying it. Since making these changes, our infection rate has gone down significantly.

Recently a sales engineer came in and had me turn up the scan settings.

Vundo is the common factor, also fake av scans like Antivirus 2008. For months, my helpdesk has been reporting a high number of machines having to be built due to infection.

How to disable symantec endpoint protection temporarily