Password protect agent
The umbrella agent can be uninstalled if a user requires local admin permissions (e.g. for old software). Can you deploy an agent/policy that the uninstaller requires a password like most antivirus programs to unload/uninstall it? Or to "break" the computer in such a way it has a highly restrictive policy if someone try's to remove it?
-
If someone has administrator access on a computer then they can remove or block from running any software that they choose. There are many very simple ways to do this that completely sidestep the "add / remove programs" option in Windows alone, not to mention methods in various *nix operating systems, including OS X.
Rather than rewriting software to provide a meaningless speedbump to people doing things on the computer that you don't want you need to invest time in removing administrator privileges on the computers and getting the software to run properly in that environment. If that means ditching old software, then ditch it.
Quite simply, rewriting this software to require a password to uninstall it will do nothing to prevent anyone from removing the software or blocking it from running if they already have administrator access on the computer.
Please sign in to leave a comment.
Comments
2 comments