Hello all,

I have activated the policy to deny access to write on hosts file using SEP, application and device control

Well, it is working create, and I try to edit, or replace the file, SEP deny my action..

But, when I replace the file using network share, like this:

\\pc_to_change\c$\windows\system32\drivers\etc

and modify the hosts file it works perfectly..

How can I fix it to deny this access???

Hello,

Try UnLocking the ADC Policy.

Check this Article:

How do I Block hosts file modification using Symantec Endpoint Protection (SEP) Application and Device Control policy?

https://www-secure.symantec.com/connect/downloads/how-do-i-block-hosts-file-modification-using-symantec-endpoint-protection-sep-application-

Hope that helps!!

Check this thread

https://www-secure.symantec.com/connect/forums/host-modification

Hardening Symantec Endpoint Protection (SEP) with an Application and Device Control Policy to increase security

Hello

Check this thread

https://www-secure.symantec.com/connect/forums/hosts-file-modified

Hi,

Please check with these article's.

http://www.symantec.com/business/support/index?page=content&id=TECH132307

http://www.symantec.com/business/support/index?page=content&id=TECH96766

Hello All..

Thanks for answers... but..:

 - I already have it working... when user try to edit locally hosts file, SEP block..

 - When the user try to edit, using share, \\pc\c$\windows.... SEP allows the change, so:

PC_1 and PC_2

User form PC_1 call PC_2 using share, like:

from PC_1:

\\PC_2\c$\windows\system32\drivers\etc\hosts and edit it, SEP allows...

I need that SEP block it too.

Hi..

Anyone????