When testing various policies with Symantec Endpoint Protection, it's all to easy to make a mistake that can result in reinstalls and system problems.
For example, when creating a new policy for application and device control, you may accidentally disable all USB devices and commit the change. What happens if you are using a USB mouse? Keyboard? No more system input.
Or another example, you'd like to create an application and device control policy to lock down the system against all removable storage devices. What if that particular SATA drive you have plugged into your system, which hosts your SEPM, has told Windows that it's a removable storage device? You'll have to uninstall the SEP client to proceed at all.
For this reason, I'd like to see a "test-mode" for deploying policies. Example: when you change your resolution in Windows, the OS will prompt you to either commit the change, or it will timeout after a brief period of time and revert to your original setting.
Having a policy time-out and revert back to the original would be extremely useful when testing policies, and can prevent time-costly mistakes.
Could such an idea ever become a reality?