Since there is no configuration interface in the Enterprise Server for disabling the Security Manager, it can only be disabled by directly modifying the domain.xml configuration file in such a way that the following line is removed:
<jvm-option\>-Djava.security.policy=yourPolicy</jvm-option\>
The -Djava.security.policy=yourPolicy option must be present in the domain.xml file to access the Administration Console.