Stoping of F-secure Services
Hi to all,
We are managing all the client through FSPM console centrally. In any domain client ,administrator can stop the F-secure Services. How can we restrict the administrator of client pc to stop or pause the F-Secure Services locally.Please advise.
Comments
-
Hello ravi12,
Unfortunately, restricting the possibility to stop F-Secure services by administrator is not supported in current BS products. We have plans to improve this in future versions.
Best regards,
Vad
5 -
@ravi12 wrote:Hi to all,
We are managing all the client through FSPM console centrally. In any domain client ,administrator can stop the F-secure Services. How can we restrict the administrator of client pc to stop or pause the F-Secure Services locally.Please advise.
Create an AD computer GPO which forces F-Secure services to be started automatically on clients and from the service security, set any local admin to have only read permissions.
For debugging purposes, I suggest to add defined AD user or group of users who has full permissions to stop the services.
1 -
I fear that will sooner or later interfear with the updateing mechanisms of F-Secure.
If you are a local administrator you are the master of the PC and so there is always a way to disable a service or security rule.
0 -
@MJ-perComp wrote:I fear that will sooner or later interfear with the updateing mechanisms of F-Secure.
If you are a local administrator you are the master of the PC and so there is always a way to disable a service or security rule.
Maybe, maybe not. Haven't seen any issues with updates yet, and all our clients are deployed with SCCM.
AFAIK F-Secure services are running as system services so removing access just from local admins shouldn't affect the F-Secure processes at all.
For sure, when you're a local admin of the PC there is always a way to disable services.
Users shouldn't be local admins at the first place in managed environment.
0
Categories
- All Categories
- 3.5K WithSecure Community
- 3.5K Products
- Get Support