In the SEPM (Symantec Endpoint Protection Manager), you have configured a policy so that "Enable File System Auto-Protect" is an unlocked setting. Users should be able to disable this setting on the SEP client, but the "Disable Antivirus and Antispyware Protection" choice in the SEP client GUI is greyed out.
Symptoms The "Disable Antivirus and Antispyware Protection" choice in the SEP (Symantec Endpoint Protection) client GUI is greyed out:
"Disable Antivirus and Antispyware Protection" disables both File System Auto-Protect and Internet Email Auto-Protect. If either of these are locked in manager policy, the client GUI option will be greyed out. Users still can select "Change Settings" from the same client menu and individually disable the settings that are unlocked.
To enable this option in the client GUI, make sure both File System Auto-Protect and Internet Email Auto-Protect are unlocked in manager policy, or instruct users to choose "Change Settings" in the client menu and disable the individual settings that are allowed.
Note: The user MUST have the ability to disable services to have the option for disabling the protection.
Imported Document ID: TECH105661
Subscribing will provide email updates when this Article is updated. Login is required.