I just deployed ENS 10.5 on some of my computers and noticed that anyone can change the settings like disable access protection etc. I would like to only allow administrators to be able to change those settings. But I couldn't find how I can do this. Any help is appreciated. Thanks.
You need to lock the interface:
In Policy Manager: choose 'Endpoint Security Common' then 'Options'.
Select whichever policy you're using and change the options under 'Client Interface Mode' to lock the UI and add a password.
Thanks, I know that's an option. But I prefer Windows UAC. That's how the Viruscan Enterprise works. Non admin users can open the Viruscan console but they can't change any settings(all greyed out) while admin users can open the console and change the settings.