Click Auto-Protect, then lock this feature by clicking the lock symbol next to Enable Auto-Protect.If you edit a shared policy, the edited policy applies to every group to which the shared policy applies. Next to Virus and Spyware Protection policy, click Tasks > Edit Policy and make the following changes.Select the group that contains the clients you want to be affected, and then click the Policies tab.

Step 2: Remove the right to disable Virus and Spyware Protection

Uncheck Allow the following users to enable and disable Network Threat Protection.

If Mixed control is enabled this will open the Client User Interface Mixed Control Settings dialog.

If Server control is enabled this will open the Client User Interface Settings dialog.

Select Server control or Mixed control if it is not already set to one of these.

Next to Client User Interface Control Settings, click Tasks > Edit Settings.

In the Symantec Endpoint Protection Manager, click Clients.

Step 1: Remove the right to disable Network Threat Protection

Disable symantec endpoint