I'm using Symantec Endpoint Protection 12.1.6 MP4 but this has been a problem for a long time. When SEP detects certain threats it wants to reboot even if the file has been successfully removed. It allows you to postpone the reboot for a few hours but then it forces you to reboot. How do I prevent SEP from rebooting the system?
Adding REGDWORD DisableRebootCommand=1 in HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC does not work.
I have figured out that I can prevent the reboot by using this procedure:
1. disable tamper protection
2. terminate the SEP service
3. delete the Reboot Manager registry entry created during the detection process
4. restart SEP service
5. re-enable tamper protection
I do not like doing that so need a way to prevent this reboot in the first place.