[prev in list] [next in list] [prev in thread] [next in thread] 

List:       focus-ms
Subject:    Re: Sub7 (SubSeven), Win2k, and IE 5.5
From:       "Micheal Patterson" <micheal () cancercare ! net>
Date:       2002-03-21 22:46:46
[Download RAW message or body]

NAV Corp Edition services are unable to be stopped or removed even with
administrator rights if that option has been disabled via the Symantec
System Center.

To allow/deny users the ability to stop/start the service, load up the SSC,
highlight the specific system then go to > All Tasks > Norton AntiVirus >
Client Administrator Only Options > Security > and check/uncheck the "Lock
the ability of users to unload Norton AntiVirus Services".

If you don't want them to be able to uninstall it, then you also check the
"Ask for password to allow uninstall of Norton AntiVirus client". This is
the password that you used when you set up the specific group after initial
installation.

--

Micheal Patterson
Network Administration
Cancer Care Network
405-733-2230

----- Original Message -----
From: "Attila Kisko" <attila.kisko@FATHOMTECHNOLOGY.com>
To: <focus-ms@securityfocus.com>
Sent: Thursday, March 21, 2002 9:54 AM
Subject: RE: Sub7 (SubSeven), Win2k, and IE 5.5


>
>
> >> It is also not possible to disable NAV from the workstation -
> >> it's centrally managed, and frighteningly current.
> >
> > can't think of a piece of software can't be disabled or at least
> disrupted by someone with Administrator or root rights. If you
> > can do it from the keyboard, a program can do it.
>
> If you stop the Norton Antivirus Client service and/or the Defwatch
> service from the Services MMC Snap-In, the antivirus client is stopped.
> (Its icon shown on the systray will changed.) Any user with admin
> privileges (and maybe power users) can do this.
>
> BR,
> Attila Kisko
>

[prev in list] [next in list] [prev in thread] [next in thread]