Allow a managed SEP client modify its scan schedule?

view full story

http://serverfault.com – Is there a way for a Symantec Endpoint Protection (SEP) administrator to configure managed clients to be allowed to configure their weekly scheduled scan? Users can modify the schedule in the registry: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\AV\LocalScans\{hex number}\Schedule But when the policy updates, the endpoint's changes will be overwritten. Is there any way to prevent this overwriting, and actually allow endpoints to change their weekly scan schedule? I'm not a SEP admin, so I apologize for any misuse of terminology or gross misunderstanding. (HowTos)