![]() At this point, I wouldn't even recommend SEP to terrorists, thieves, or other malcontents. We had some awful experiences with it and are transitioning Customers away from Symantec. My condolences to you for having to deal with SEP. Symantec Endpoint Protection (SEP) 14 prevents Citrix roaming profiles from being deleted at logoff. Either something is available or its not. I'd turn on "Advanced Features" in Active Directory Users and Computers and examine the "Object" tab of the "Symantec" user you found to try and pinpoint when it was created to figure out where it came from. Symantec Endpoint Protection, developed by Broadcom Inc., is a security software suite that consists of anti-malware, intrusion prevention and firewall. Symantec does a very poor job of communicating this through their web site. The account used for directory service access is not created by the product's installer automatically. client service starts, it disables Auto-Protect. Unless you've made heavy modifications to your AD's stock permissions, you won't need this account to be an "Administrator". When you lock an option, you prevent user changes to the option. What Is a Group Update Provider When should a. The stock permissions on an Active Directory permit a non-privileged account to perform the LDAP query necessary to return user, computer, and OU objects. The use of GUPs in your SEP environment can either be a useful tool or something that requires more management. Symantec Endpoint Security N/A Unavailable What is Symantec Endpoint Security Symantec Endpoint Protection is the companys flagship antivirus / endpoint security product. The account used here does not need "Domain Admin" or any other high level of privileges. When add a "Directory Server", you will enter a username and password used to bind to the LDAP server. ![]() ![]() Here's Symantec's document re: Active Directory integration: When you talk about "how SEP authenticates on the domain", I'm going to assume you're referring to SEP's access to the directory to perform its cruddy "synchronization" of OUs of AD into its own database.
0 Comments
|