hello to all,
we are evaluating the idea to deploy system lockdown in our organization. Actually we have a well deployed SEP site with SEPM 12.1.3.
Actually we have activated system lockdown on few tests machines with no problems. We have found some workarounds on Symantec KB to resolve the few problems we encountered (http://www.symantec.com/business/support/index?pag... and ). Our problem is that since we have lot machines divided in groups, we have to insert MANUALLY all the exceptions in plus of fingerprint file. Since we have lot of exceptions for automatic updating Microsoft programs (winupdate) and other things the activity will be very hard to do in all groups when will go ahead with deploy. There is also a serious risk to make mistakes since every exception should be inserted manually (for example c:\program files\swA\*\* ; c:\program files (x86)\swb\*\* etc etc etc...).
Our question is: is there a way to insert all the exceptions using a flat file with similar steps already used when importing fingerlist files?
thank u in advice to everyone will respond this post
I need a solution