Stoping of F-secure Services

ravi12

Hi to all,

We are managing all the client through FSPM console centrally. In any domain client ,administrator can stop the F-secure Services. How can we restrict the administrator of client pc to stop or pause the F-Secure Services locally.Please advise.

Vad

Hello ravi12,

 

Unfortunately, restricting the possibility to stop F-Secure services by administrator is not supported in current BS products. We have plans to improve this in future versions.

 

Best regards,

Vad

marlo

---

@ravi12 wrote:

Hi to all,

We are managing all the client through FSPM console centrally. In any domain client ,administrator can stop the F-secure Services. How can we restrict the administrator of client pc to stop or pause the F-Secure Services locally.Please advise.

---

Create an AD computer GPO which forces F-Secure services to be started automatically on clients and from the service security, set any local admin to have only read permissions.

For debugging purposes, I suggest to add defined AD user or group of users who has full permissions to stop the services.

 

MJ-perComp

I fear that will sooner or later interfear with the updateing mechanisms of F-Secure.

 

If you are a local administrator you are the master of the PC and so there is always a way to disable a service or security rule.

marlo

---

@MJ-perComp wrote:

I fear that will sooner or later interfear with the updateing mechanisms of F-Secure.

 

If you are a local administrator you are the master of the PC and so there is always a way to disable a service or security rule.

---

Maybe, maybe not. Haven't seen any issues with updates yet, and all our clients are deployed with SCCM.

AFAIK F-Secure services are running as system services so removing access  just from local admins shouldn't affect the F-Secure processes at all.

 

For sure, when you're a local admin of the PC there is always a way to disable services. 

Users shouldn't be local admins at the first place in managed environment.