## Registry key location changes as of version 12.1.1 MP1

To provide better support for the registry keys that are commonly used for client monitoring, the following subkeys moved as of Symantec Endpoint Protection 12.1.1 MP1. If you run custom scripts against the Symantec Endpoint Protection registry, or you wrote a remote monitoring solution for an earlier release, you must revise them when you upgrade to any version later than 12.1.1 MP1.

All new registry subkeys are written to the following location: HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\Public-Opstate.

Note: | This list includes only the registry subkeys that were moved. Other subkeys are documented elsewhere. See Operational state reference.

Warning: | All registry subkeys and values for Symantec Endpoint Protection should be treated as read-only.

Table:

Subkey name | Previous location | New location | Used for
--- | --- | --- | ---
ASRunningStatus | HKEY_LOTo provide better support for a set of registry keys that are commonly used for client monitoring, the following subkeys moved as of Symantec Endpoint Protection 12.1.1 MP1. If you run custom scripts against the Symantec Endpoint Protection registry, or if you have written a remote monitoring solution for an earlier release, you must revise them when you upgrade to any release later than 12.1.1 MP1. CAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\ | HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\Public-Opstate | Registers whether Virus and Spyware Protection is enabled or disabled.
Note: | This subkey appears to be redundant with the following subkey.
AVRunningStatus | HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\ | HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\Public-Opstate | Registers whether Virus and Spyware Protection is enabled or disabled.
DeployPreviousVersion | HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink\OpState\ | HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\Public-Opstate | Registers the four-part version number of the Symantec Endpoint Protection client software that was previously installed on the client computer.
DeployRunningVersion | HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink\OpState\ | HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\Public-Opstate | Registers the four-part version number of the Symantec Endpoint Protection client software that is currently installed on the client computer.
DeployStatus | HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink\OpState\ | HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\Public-Opstate | Registers details about the status of client software download, installation, upgrade, or patch.
DeployTargetVersion | HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink\OpState\ | HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\Public-Opstate | Registers the four-part version number of the Symantec Endpoint Protection client software that is planned for future installation on the client computer.
FWRunningStatus | HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\ | HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\Public-Opstate | Registers whether firewall protection is enabled or disabled.
Infected | HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\AV\ | HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\Public-Opstate | Registers whether the client computer is infected with one or more risks that are detected by Virus and Spyware Protection.
LastServerIP | HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink\ | HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\Public-Opstate | Registers the IP address of the most recent Symantec Endpoint Protection management server that the client connected to.
RebootReason | HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink\OpState\ | HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\Public-Opstate | Registers the reason for a restart of the client computer.
snac_enabled | HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\SMC\ | HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\Public-Opstate | Registers whether Symantec Network Access Control is enabled or disabled.