You can prevent users from disabling protection on the client computer by setting the user control level. The user control level also determines whether the client user interface can be completely invisible, display a partial set of features, or display a full user interface.
To prevent users from disabling Virus and Spyware Protection, you lock the settings.
For the Windows client, you can configure all the options. For the Mac client, only the notification area icon and some IPS options are available in server control and client control.
Table: User control levels
Clients that run in client control or mixed control switch to server control when the server applies a Quarantine policy.
Some managed settings have dependencies. For example, users may have permission to configure firewall rules, but cannot access the client user interface. Because users do not have access to the Configure Firewall Rules dialog box, they cannot create rules.
To change the user control level
In the console, click Clients.
Under View Clients, select the group, and click the Policies tab.
Under Location-specific Policies and Settings, under the location you want to modify, expand Location-specific Settings.
To the right of Client User Interface Control Settings, click Tasks > Edit Settings.
In the Client User Interface Control Settings dialog box, do one of the following options: