topic restrict the "shutdown client' Option in Endpoint

restrict the "shutdown client' Option

flachance — Fri, 25 Apr 2025 12:50:29 GMT

Hi,

Does anyone know if there is a way to disable the 'Shutdown Client' option on the Endpoint Remote Access client (E88.60)?

Or a way to restrict it to administrators?

thanks

Francis

Re: restrict the "shutdown client' Option

the_rock — Fri, 25 Apr 2025 13:45:58 GMT

For what its worth and its my duty to always say this now, since AI responses should be taken with grain of salt, here is what AI copilot provided.

Andy

******************

Yes, you can disable the 'Shutdown Client' option on the Endpoint Remote Access client. This can be done through the policy settings in the SmartConsole. Here are the steps to achieve this:

Open SmartConsole and connect to your Security Management Server.
Navigate to the Policy tab and select the relevant policy package.
Go to the 'Access Control' tab and select 'Endpoint Security'.
Edit the relevant policy for the Endpoint Security client.
Navigate to 'Client Settings' and then to 'General'.
Find the option to disable capabilities and ensure that the 'Shutdown Client' option is disabled.

By following these steps, you can ensure that the 'Shutdown Client' option is not available to users on the Endpoint Remote Access client.

If you need more detailed instructions or encounter any issues, please refer to the Harmony Endpoint Administration Guide or contact Check Point Support.

Re: restrict the "shutdown client' Option

flachance — Fri, 25 Apr 2025 14:27:31 GMT

That looked promising but I can't find that setting. In SmartConsole under Access Control I only have Policy and NAT. There is no Endpoint Security there.

Re: restrict the "shutdown client' Option

flachance — Fri, 25 Apr 2025 14:33:50 GMT

Think I just found how to do this via the ttm file. sk75221 - Remote Access TTM Configuration

disable_ui_shutdown_button

Description: Disable ability to shutdown VPN client through Windows tray icon menu.

Re: restrict the "shutdown client' Option

the_rock — Fri, 25 Apr 2025 14:45:12 GMT

Weird, I just checked that file in my R82 lab, cant find it in trac_client_1.ttm file...guess needs to be added manually?

Andy

Re: restrict the "shutdown client' Option

the_rock — Fri, 25 Apr 2025 14:46:14 GMT

I have a gut feeling thats applicable only for on prem endpoint server, I could not find it either in cloud portal.

Re: restrict the "shutdown client' Option

flachance — Fri, 25 Apr 2025 15:15:13 GMT

I didn't have to add it. It was already there (R81.20).

Re: restrict the "shutdown client' Option

flachance — Fri, 25 Apr 2025 15:17:15 GMT

Sorry I misread your post. I thought you didn't have the file. Yes I had to add that option in the trac_client_1.ttm file

Re: restrict the "shutdown client' Option

the_rock — Fri, 25 Apr 2025 15:18:23 GMT

Interesting...I just checked my R81.20 cluster, not there either. Would you mind send a screenshot of what you see on your side?

Andy

Re: restrict the "shutdown client' Option

the_rock — Fri, 25 Apr 2025 15:19:10 GMT

Yup, I do have the file : - )

Can you send how you added it, just a screenshot would do, appreciated!

Andy

Re: restrict the "shutdown client' Option

flachance — Fri, 25 Apr 2025 15:23:36 GMT

Re: restrict the "shutdown client' Option

the_rock — Fri, 25 Apr 2025 15:26:43 GMT

THANK YOU!!