How to confirm on a SEP client if "System Lockdown" is enabled.
Last Updated October 20, 2015
You need to be able to check and confirm if "System Lockdown" is enabled on a Symantec Endpoint Protection (SEP) client without checking the policies on the Symantec Endpoint Protection Manager (SEPM).
On the SEP client side, there is nothing on the SEP GUI that can confirm if "System Lockdown" is enabled nor is there a registry key that can be checked. The only solution to check if "System Lockdown" is enabled on the client, is to export the SEP client configuration to a text file and check inside the file if there are any references to "System Lockdown".
To export the SEP client configuration to a file:
Start > Run > and type : smc -exportconfig c:\filenameofyourchoice.xml and enter
Go to c:\filenameofyourchoice.xml and open the file with notepad or an editor of your choice
Search for text string: "System Lockdown"
If the SEP client has "System Lockdown" enabled, you will see something like this: