Not from a computer (as it was shred into pieces), but from the console itself. And after some time, I will have to manually remove several thousand of them. But all of them will stay in the console as dead agents. The thing is, I have around 40 000 computers to manage, some of them in time will be retired, decommissioned. My idea was to do that externally, without a console via script (if it has to connect to the Enforce console to gain permissions, that is ok). And - I do not want to accomplish above in the console (as it is possible, you can disable DLP agent using Enforce console, you can also remove agents from the console level as well). I do not want to install another agent on endpoints (we have already too many). However things you suggested do not apply to my enterprise. Good Cervantes - thank you for your reply.

So in summary, you cannot accomplish what you need using DLP console. How to properly image a computer with Notification Server Client (Altiris Agent) installed Read a document related to imaging computer with the Altiris agent installed. I will suggest to check the documentation for the ITMS suite (Symantec management planform) to better control DLP agent.

You can add any user to the console and give them permissions to disable agents, and you can organize agents by groups and potentially creating a configuration with every channel disabled when needed. You can disable password protection to remove agents by users when creating agent installer packages. However, you can disable DLP agents, read the Admin guide to learn how to manage DLP agents.ĭLP agents are tampered protected, and the only way to disable them is form the console, unless you want to manually run DLP agent tools and alter configuration. Removing or installing DLP agents cannot be done from the DLP Enforce console, use a software deployment solution such as ITMS (Symantec Software plugin), SCCM (MS), or SEP (Symantec), or Windows tools.

Disable symantec