stop smc service remotely

[Migration User]

In SEPM Pen drive is blocked in some clients now we want to allow them for time beingso I don’t want to add them using exception list,

Instead of that I just want to stop smc service remotely so how can I stop smc service remotely?

[Migration User]

Check the forum

https://www-secure.symantec.com/connect/forums/restart-smcexe-remotely

Run the command with Psexec tool

Psexec Tool link (http://technet.microsoft.com/en-us/sysinternals/bb897553.aspx)

Use the command

"%programfiles%\Symantec\Symantec Endpoint Protection\smc.exe" -p [Password] -stop

Check the Manish Comment

https://www-secure.symantec.com/connect/forums/stop-sep-remotely#comment-8696141

[Rafeeq]

Stopping smc will stop the client communnication with the manager. it will not disable Symantec endpoint functionality. It will still block the usb. Either you need to allow the usb or put the clients in diff group where there is no block policy applied then put it back to the original group once work is done.

[pete]

the ADC policy works even if the SMC is stopped.

[Migration User]

I have recently tried that trick in my system and usb is accessible after smc stop.

[Rafeeq]

It shouldn't work. but if you are confident of doing that.Then please use psexec.exe to stop it remotely.

 

[Migration User]

You could create a new group with the same policy settings as the old one (they can be easily copied). Then allow the pen drives in the new group and move the clients to it.

Just move them back if you want to re-stablish the blocking.

[Migration User]

When you stop the service, you can only acceissble the device which you newly connected and for the other device you can enable it from device manager manually.

Best practise is that create the test group and move the client in the group and not be assigned any usb block policy on that group.

After complete the work move it in old groups.