When you edit any policy, next to policy settings you can see a padlock icon. You decide what can be change by users and what stays as you set it. If you tight up with Active Directory authentication, then you must use a new Administrator account. Symantec Endpoint Protection Manager enables you to lock all important setting one by one. Resetpass.bat will only work if you are using Symantec Manager Authentication.In case that you received “The Administrator account is locked” in the management console login, please try to reset the password after account unlocked in 15 minutes (60 minutes for certain release version).
It will prompt you to change the password immediately.
You will see a non-responsive user interface with a warning dialog box partially visible on the screen: Unable to access Symantec Endpoint Protection management interface from any browser.
In the Server Information panel, accept or change the default values for the following boxes, and then click Next.
In the Management Server Configuration Wizard panel, check Install an additional site, and then click Next. You may see a warning dialog box that is partially visible on the screen however, you are unable to interact with the SEPM user interface. Install Symantec Endpoint Protection Manager on the new server.
After installing or migrating the Symantec Endpoint Protection Manager (SEPM) to version 14.2 Maintenance Patch 1 (14.2 MP1), the user interface stops responding.