I just installed SEP 12.1.5 on a Win2012 server. During the policy creation I chose not to enable the Early Launch Anti-Malware Driver. After the install, the local client continues to be in “RED” alarm stating that "Early Launch Anti-Malware is Disabled”. If I have chose not to run the ELAM in the policy, why am I given an alarm or error in my SEP client install? Is there a way to “Green-up” my local SEP install without enabling ELAM.
So it's unchecked and the lock icon is closed in the policy? Needs to be like this:
you need to click on that small lock icon and close it, or else it will think some else other than admin disabled it , thats why the red warning :)
Thank you for the quick response. I never (that I can remember) have used the lock in the policies before. I just checked and it was unlocked. I will lock and either force policy update or reinstall for resolution. If it works, I will mark as answer.
I worked and Greened up. Thanks again for the answer. Both of you.