restrict the "shutdown client' Option

[flachance]

Hi,

Does anyone know if there is a way to disable the 'Shutdown Client' option on the Endpoint Remote Access client (E88.60)?

Or a way to restrict it to administrators?

thanks

Francis

[the_rock]

For what its worth and its my duty to always say this now, since AI responses should be taken with grain of salt, here is what AI copilot provided.

Andy

******************

Yes, you can disable the 'Shutdown Client' option on the Endpoint Remote Access client. This can be done through the policy settings in the SmartConsole. Here are the steps to achieve this:

1. Open SmartConsole and connect to your Security Management Server.
2. Navigate to the Policy tab and select the relevant policy package.
3. Go to the 'Access Control' tab and select 'Endpoint Security'.
4. Edit the relevant policy for the Endpoint Security client.
5. Navigate to 'Client Settings' and then to 'General'.
6. Find the option to disable capabilities and ensure that the 'Shutdown Client' option is disabled.

By following these steps, you can ensure that the 'Shutdown Client' option is not available to users on the Endpoint Remote Access client.

If you need more detailed instructions or encounter any issues, please refer to the Harmony Endpoint Administration Guide or contact Check Point Support.

[flachance]

That looked promising but I can't find that setting. In SmartConsole under Access Control I only have Policy and NAT. There is no Endpoint Security there.

[the_rock]

I have a gut feeling thats applicable only for on prem endpoint server, I could not find it either in cloud portal.

[flachance · Accepted solution]

Think I just found how to do this via the ttm file. sk75221 - Remote Access TTM Configuration

disable_ui_shutdown_button

Description: Disable ability to shutdown VPN client through Windows tray icon menu.

[the_rock]

Weird, I just checked that file in my R82 lab, cant find it in trac_client_1.ttm file...guess needs to be added manually?

Andy

[flachance]

I didn't have to add it. It was already there (R81.20).

[flachance]

Sorry I misread your post. I thought you didn't have the file. Yes I had to add that option in the trac_client_1.ttm file

[the_rock]

Yup, I do have the file : - )

Can you send how you added it, just a screenshot would do, appreciated!

Andy

[flachance]

[the_rock]

THANK YOU!!

[the_rock]

Interesting...I just checked my R81.20 cluster, not there either. Would you mind send a screenshot of what you see on your side?

Andy