Click Internet Email Auto-Protect, then lock this feature by clicking the lock symbol next to Enable Internet Email Auto-Protect.

Click File System Auto-Protect, then lock this feature by clicking the lock symbol next to Enable File System Auto-Protect.

Click Antivirus and Antispyware policy.

Step 2: Remove the right to disable Threat detection:

Uncheck Allow users to enable and disable Network Threat Protection.

If Mixed control is enabled this will open the Client User Interface Mixed Control Settings dialog.

If Server control is enabled this will open the Client User Interface Settings dialog.

Select Server control or Mixed control if it is not already set to one of these.

Click Tasks to the right of 'Client User Interface Control Settings', then click Edit Settings.

Select the group that contains the clients you want to be affected.

Open the Symantec Endpoint Protection Manager.

Step 1: Remove the right to disable Network Threat Protection:

To prevent users from disabling Symantec Endpoint Protection (SEP) on their client: Please do the following and mark as a solution if it works:

Disable symantec endpoint protection 12.1.6