When you delete a file from an point you also delete the registry entries that point to that file. If a file cannot be deleted for any reason, Symantec EDR times-out the action 7 days after initiated so that the process doesn't run indefinitely. The file delete timeout function applies to both ECC 1 and ECC 2 endpoints.
The delete file action is supported for enrolled as well as non-enrolled clients running SEP 12.x RU6 MP3 and later. For the enrolled clients that run SEP 14.0 RU1 and later, this task is performed through ECC 2.0 directly from Symantec EDR to the client without the need to wait for the SEPM heartbeat. For the enrolled clients that run ECC 1.0, this option remains active until the file is deleted from the endpoint through SEPM. You can view the status of the file deletion on the Logging page.