I found this Administrator user called "symantec" in my AD and i wanted to know if the recently installed SEP (Symantec Endpoint Protection) product created it? Does anyone know if SEP needs to create a user in the Administrators group for its normal operation?

Explanation in to how SEP authenticates on the domain would also be helpful.


Here's Symantec's document re: Active Directory integration: http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007092721431648 When you talk about "how SEP authenticates on the domain", I'm going to assume you're referring to SEP's access to the directory to perform its cruddy "synchronization" of OUs of AD into its own database. When add a "Directory Server", you will enter a username and password used to bind to the LDAP server. The account used here does not need "Domain Admin" or any other high level of privileges. The stock permissions on an Active Directory permit a non-privileged account to perform the LDAP query necessary to return user, computer, and OU objects. Unless you've made heavy modifications to your AD's stock permissions, you won't need this account to be an "Administrator".

The account used for directory service access is not created by the product's installer automatically. I'd turn on "Advanced Features" in Active Directory Users and Computers and examine the "Object" tab of the "Symantec" user you found to try and pinpoint when it was created to figure out where it came from.

My condolences to you for having to deal with SEP. We had some awful experiences with it and are transitioning Customers away from Symantec. At this point, I wouldn't even recommend SEP to terrorists, thieves, or other malcontents. It's just that bad.

  • thanx for the helpful info. i didnt realise this product was so bad.
    – cottsak
    Jul 6 '09 at 9:13
  • 1
    Heh heh... Maybe it'll be better for you. It was awful for us and our Customers. Jul 6 '09 at 14:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.