Protection Chrome Extension - Disable Symantec Endpoint

You disabled the extension, rebooted, and it’s back. Here is why.

| Action You Took | Why It Failed | | :--- | :--- | | Turned off toggle in chrome://extensions | SEP client syncs policy every 30 minutes and re-enables it. | | Deleted registry keys | SEP client recreates them on service start. | | Uninstalled SEP client | You likely lack admin rights; UAC prompt blocked you. | | Removed Chrome profile folder | SEP client detects missing folder and re-injects the extension. |

The golden rule: If the SEPM policy says "Force Install," the extension will return unless you override the policy at a higher level (local GPO or registry override as shown in Part 2, Method 2).

If the extension was not forced via Group Policy, it can be disabled through the browser settings.

Caveat: Managed policies or SEP clients can reinstall or re-enable the extension.

You do not need admin rights to modify Current User registry keys, but this will only work if the IT policy isn't locked down completely.

Verification: Go to chrome://policy and click "Reload policies." If you see the extension ID under "Effective policies," you have successfully overridden the admin policy.

While the extension can be disabled via the Chrome extensions menu if permissions allow, most corporate deployments require registry edits or IT administrator intervention to fully remove the forced installation.

To disable the Symantec Endpoint Protection (SEP) Chrome extension, you typically need administrative access, as the software is designed to prevent unauthorized removal. Broadcom TechDocs For Managed Clients (via SEPM) If the extension is managed by the Symantec Endpoint Protection Manager (SEPM) , it is often forced via a registry key called ExtensionInstallForceList . To remove it: Disable Browser Intrusion Prevention : In the SEPM console, navigate to Policies > Intrusion Prevention . Disabling the "Browser Intrusion Prevention"

setting for the client group will automatically unload the extension from Chrome. Enable Third-Party Management : For version 14.3 RU9 or later , check the option "Enable third party management of extensions" disable symantec endpoint protection chrome extension

. This removes the force-install registry key, allowing you to manage or disable the extension using other tools like Active Directory GPO Google Admin Locking the State

: If the client shows a "Disabled" error after turning it off, select the padlock icon

next to the policy item in SEPM to lock the browser protection in its disabled state. Broadcom support portal For Individual Troubleshooting

If you are troubleshooting a specific machine and have the necessary permissions:

Disabling the Symantec Endpoint Protection (SEP) Chrome extension varies depending on whether you are an end-user or a system administrator. Below are the methods to manage or disable these extensions.  For Individual Users (Troubleshooting) 

If you have local permissions and need to temporarily disable the extension for troubleshooting, follow these steps in Google Chrome: 

Open Extension Management: Click the three-dotted icon (top right) > Extensions > Manage Extensions.

Toggle Off: Locate the Symantec Endpoint Protection extension and click the blue toggle to turn it gray (Disabled).

Alternative (Complete Stop): If the extension is locked by a policy, you may need to stop the SEP service entirely by opening the Run command (Win + R), typing smc -stop, and clicking OK. Note: This requires administrative rights and may be blocked by Tamper Protection.  For Administrators (Policy Management)  You disabled the extension, rebooted, and it’s back

Administrators can control whether the extension is deployed or active across the network via the Symantec Endpoint Protection Manager (SEPM): 

Prevent Automatic Installation: In the Intrusion Prevention Policy settings, you can enable the option to manage extensions through third-party tools like GPO or Google Admin, which prevents SEP from automatically force-installing the extension. Disable via Policy: Go to the Policies page in SEPM. Select Intrusion Prevention and edit your active policy.

Under Intrusion Prevention Settings, you can uncheck the option for Browser Intrusion Prevention to unload the extensions from Chrome and Edge.

Tamper Protection: If you cannot disable the extension on a client, ensure Tamper Protection is not locking the settings. This is found under Clients > Policies > General Settings > Tamper Protection.  Verification and Monitoring  To confirm if extensions are disabled across your fleet: 

SEPM Home Page: Check the Endpoint Status for clients with a "Disabled" status.

Client Logs: The system log on the client computer will record an event every time the browser extension is enabled, disabled, or removed. 

If you're having trouble because the settings are greyed out, I can help you find the specific Registry keys or Group Policy settings to override them. Would you like instructions for Windows Registry or Active Directory? 

Whether you're an IT admin or a home user, managing the Symantec Endpoint Protection (SEP) extension in Chrome often feels like a tug-of-war between security and performance. The Conflict: Why Disable It?

While the extension is designed to block malicious scripts and data leaks, users often find themselves looking for a way to turn it off for a few common reasons: If the extension was not forced via Group

Performance Drag: Users have reported significant internet bandwidth slowdowns, sometimes dropping speeds from 95 Mbps to under 20 Mbps when combined with other security layers.

Browser Crashes: Incompatibility between certain Chrome versions (like 78 and 79) and SEP can trigger the infamous "Aw, Snap!" error, rendering the browser unusable.

Troubleshooting: Developers and IT staff often need to disable protection temporarily to test internal applications or identify conflicts. How to Disable the Extension 1. Standard Method (For Home Users)

If your settings aren't locked by an administrator, you can manage it directly in Chrome: Open Google Chrome.

Click the three dots (top right) > Extensions > Manage extensions.

Find the Symantec extension and toggle the switch to gray (Off).

Alternatively, right-click the extension icon and select "Remove from Chrome". 2. Administrative Method (For Managed Computers)

In corporate environments, the extension is often re-added automatically by group policies. Administrators can manage this through the Symantec Endpoint Protection Manager (SEPM): Chrome 78 Update & Symantec Endpoint Protection Issue!

Here’s a step-by-step guide to disable the Symantec Endpoint Protection (SEP) Chrome extension (usually called Symantec Endpoint Protection Web Security or Symantec DLP).

⚠️ Only if your computer is not managed by a company IT policy — otherwise changes may revert.

Note: If your device is managed by a corporate IT policy, these options may be grayed out. In that case, you’ll need Method 3.