While many of the status messages can be resolved directly from the console, there are two that require manual intervention immediately – “ not reporting” and “ malfunction.” These introduce risk in the environment and are the vulnerable systems that can be exploited. Malware will typically try to disable the antivirus software, making this feature extremely useful to SEP Administrators. It protects the clients services and registry keys from being tampered with (disabled/deleted, etc.). Tamper Protection is one of the most important features of Symantec Endpoint Protection. For details, please see Creating a Tamper Protection exception on Windows clients or Creating exceptions from log events.Tamper Protection Status in Symantec Endpoint Protection (SEP) It is recommended to create a Tamper Protection exclusion, where possible, rather than disable Tamper Protection altogether. This occurs as soon as the clients receive the updated policy from the SEPM. Tamper Protection is disabled for clients within this client-group, and for clients within client-groups that inherit policies from this group. Therefore if you want to make group level changes this should be turned OFF. Note: If Policy inheritance is marked as ON, then policies and settings will be inherited from the main parent group and no modifications will be allowed.Select the client-group you want to modify.In the Symantec Endpoint Protection (SEPM) console, click Clients.Tamper Protection is now disabled for this SEP client.ĭisable Tamper Protection on multiple clients However, Tamper Protection will no longer block attempts to modify SEP files, folders, processes, or Registry values. Note: This setting leaves Tamper Protection enabled. Uncheck Protection Symantec security software from being tampered with or shutdown.Next to Client Management, click Configure Settings.In the SEP client interface, click Change Settings.To disable Tamper Protection on multiple clients, use the method below.

Use this method to disable Tamper Protection on a small number of clients. Disable Tamper Protection on a single client

Symantec disable tamper protection