Managing administrator accounts

You can use administrator accounts to manage
Symantec Endpoint Protection Manager
datacenters. Administrators log on to
Symantec Endpoint Protection Manager
to change policy settings, manage groups, run reports, and install client software, as well as other management tasks.
The default account is a system administrator account, which provides access to all features. You can also add a more limited administrator account, for administrators who need to perform a subset of tasks.
For a small company, you may only need one administrator and one domain. For a large company with multiple sites and Windows domains, you most likely need multiple administrators, some of whom have more access rights than others. You may also need to add multiple domains within
Symantec Endpoint Protection Manager
.
You manage domains and administrator accounts and their passwords on the
Admin
page.
Account administration
Task
Description
Decide whether to add multiple domains
Add administrator accounts
Add accounts for administrators who need access to the
Symantec Endpoint Protection Manager
console.
  1. Add the types of administrator accounts that you need, and the level of access rights. See:
  2. Choose a method to authenticate administrator for when they log on to
    Symantec Endpoint Protection Manager
    (optional). By default, the
    Symantec Endpoint Protection Manager
    database authenticates the administrator's credentials. See:
Unlock or lock an administrator account
By default,
Symantec Endpoint Protection Manager
locks out an administrator after a user tries to log on to
Symantec Endpoint Protection Manager
using the administrator account too many times. You can configure these settings to increase the number of tries or time the administrator is locked out.
If an administrator is locked out of their account, they must wait the specified time before logging on again. You cannot unlock an account during the lockout interval. See:
Change and reset lost passwords
Configure logon options for
Symantec Endpoint Protection Manager
You can configure the following logon options for each type of administrator:
For more information, see: