Hello All,
BES client restart issue in win7 machine. when I checked it sets disabled and unable to change as all options are greyed out.
anyone suggest what can be done on this situations.
Thank you in Advance.
Hello SysAdmin3,
On Windows endpoints, you can prevent the BigFix Client service from being stopped or disabled. You can also configure the service to automatically restart in case it is killed/stopped.
To ALLOW Administrators to start/stop the BESClient service (default state):
cmd.exe /c sc failure besclient reset= 1 actions= restart/5000
cmd.exe /C sc sdset BESClient D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
To DENY Administrators from starting/stopping the BESClient service:
cmd.exe /c sc failure besclient reset= 1 actions= restart/5000
cmd.exe /c sc sdset besclient D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
For more details you might want to check the following technote:
How to Prevent Users from Tampering with BigFix Windows Agents
https://www-01.ibm.com/support/docview.wss?uid=swg21687066
thank you for this update.