Sign in
 
HomeProductsLibraryLearnDownloadsSupportForums
Microsoft Forefront TechCenter >
> 
> 
Allow local administrator change settings FEP.

Answered Allow local administrator change settings FEP.

  • Wednesday, January 02, 2013 6:55 PM
     
     
    Sign In to Vote
    0

    Hi,

    I have SCCM 2012 with FEP 2012.

    I would like know if I can change settings FEP with adm local or another user in same computer?

    Att.,

    Lessandro Zampieri - http://lezampieri.com

     

All Replies

  • Wednesday, January 02, 2013 11:52 PM
     
     Answered
    Sign In to Vote
    0
    Local admins can change any setting they want by modifying the registry, even if those setting are grayed out in the FEP/SCEP GUI. However, the changes will be reverted the next time the policy is re-applied (once a day.) To be able to change the settings from within the GUI, you need to enable that option in your policy through the SCCM console. Tick the checkboxes that say "allow users on endpoint computers to ____________"
     
  • Thursday, January 03, 2013 12:20 PM
     
     
    Sign In to Vote
    0

    Thanks.

    But if I don`t chek this option allow users on endpoint computers to, The user administrator or another can`t alter settings in local computer through GUI?

    Att.,

    Lessandro Zampieri - http://lezampieri.com


     
  • Thursday, January 03, 2013 3:37 PM
     
     Answered
    Sign In to Vote
    0

    Actually, in 2012 they aren't checkboxes. They are dropdown boxes with true or false:

    Scan settings: User control of scheduled scans

    Real-time protection: Allow users on client computer to configure real-time protection settings

    Advanced: Allow users to configure the setting for quarantined file deletion

    Allow users to exclude files and folders, file types, and processes

    Allow all users to view the full History results

    MAPS: Allow users to modify MAPS settings