i have set a notification condition for new learned application the notification works normally, but i can't figure who were running what.

is there a way that i can know this application has been installed on that client.

HI,

 

Best Practices Guide to Application Learning in Symantec Endpoint Protection Manager

Article:TECH134367

|

Created: 2010-01-28

|

Updated: 2012-03-30

|

Article URL http://www.symantec.com/docs/TECH134367

 

How to set up learned applications in the Symantec Endpoint Protection Manager

Article:TECH102994

|

Created: 2007-01-29

|

Updated: 2010-08-17

|

Article URL http://www.symantec.com/docs/TECH102994

Check this thread

https://www-secure.symantec.com/connect/forums/learned-applications-symantec-endpoint-protection-manager

I don't believe you will see the name of the PC. It will only show up in the Application log in the Exception policy. From there you can add as an exception.

Brian81 i am agree with what you said, but isn't it there any way to do this some time i want to know which client run that .exe or .DLL .

The only way I've found is to add the application you want to monitor by adding it as a "Forced application detection"

From here you can than setup the alert, which will show the user/PC that it ran on.

Hello,

Check this Article:

Monitoring the applications and services that run on client computers

http://www.symantec.com/docs/HOWTO55218

You can use a query tool to search for the list of applications that the client computers run. You can search on application-based criteria or computer-based criteria. For example, you can find out the version of Internet Explorer that each client computer uses.

See Searching for information about the applications that the computers run.

You can save the results of an application search for review.

See Saving the results of an application search.

Hope that helps!!

Hi,

You can enable learned applications for a group or a location. The clients then keep track of every application that runs and send that data to the management server

You can set up a notification to be sent to your email address when each client in a group or location runs an application.

See Setting up administrator notifications.

Configuring the management server to collect information about the applications that the client computers run

http://www.symantec.com/docs/HOWTO55219

Also check this article

Best Practices Guide to Application Learning in Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH134367