I am Dale Hayter, a Microsoft and VMware certified Technical Consultant.

My blog has been built up over the years from my experience of working on an IT helpdesk and also from being out on-site.

© Blackforce

Change the number of updates kept by the Symantec Endpoint Protection client

I dont know why Symantec insist on every client / server keeping 3 versions of updates at any one time. Seems weird. Surely the latest and 1 roll back should be sufficient.

To configure the minimum number of content revisions in SEP 11.x:

Ensure the following registry DWORD exists:

HKEY_LOCAL_MACHINE\Software\Symantec\Symantec Endpoint Protection\Content\{}CacheEntriesEx

Modify the registry value to correspond to the number of revisions required.

These settings will take effect the next time that content type is updated on the system.

The key for 32-bit AV definitions is “{C60DC234-65F9-4674-94AE-62158EFCA433}”.
For 64-bit use “{1CD85198-26C6-4bac-8C72-5D34B025DE35}”.

Note: The registry DWORD was named CacheEntries prior to SEP 11.0 Maintenance Release 2 (MR2).