Windows 7 SP1 32bit
SEP 11 RU7, RU7 MP1, RU7 MP2 clients all managed by SEPM
We have been running Windows 7 workstations for over a year. We use a GPO to enforce the Windows firewall. SEP clients have NTP component installed so that we can use IPS but we don't use the SEP firewall (no firewall policy has been added to any group).
Until recently everything was fine - the Windows firewall was running and working as expected and SEP firewall wasn't even a part of the picture. Suddenly that has changed on some - but not all - workstations.
In Control Panel --> Windows Firewall on some workstations it now shows "These settings are being managed by your vendor application SEP".
In Control Panel --> Action Center both the SEP firewall and Windows firewall have a status of "On"
I have verified that in this condition there isn't any firewall protection. Thats becuase SEP is in charge of the firewall but SEP hasn't been configured with any firewall policy = no protection. Help!
We want to use the Windows firewall. I can't figure out why this is happening on some workstations (about 10 to 20%) but not others. Anyone provide ideas on what to check?
I have tried this http://www.symantec.com/connect/articles/windows-7-firewall-indicate-these-settings-are-being-managed-vendor-application-symantec-en but after withdrawing the firewall policy SEP went back to being in charge of the firewall again.