Hide BESClient Service

Usage and Config SWD
1

Hi All,

I’m looking for Bigfix task or registry settings to hide the BESClient service.
We are suspecting some users with admin rights to uninstall the client or disabled the BESClient service to prevent us from uninstall unauthorized softwares.

I know there is a fixlet to hide the BESClient from ARP, but can’t find one to hide the services.
Or best if we can required a password to Uninstall the BESClient.

Thanks.

2

Hello!

Please have a look at the following Wiki page, and see if it helps here:

https://bigfix-wiki.hcltechsw.com/wikis/home?lang=en-us#!/wiki/BigFix%20Wiki/page/Preventing%20Tampering%20with%20BigFix%20Agents

Note of course that those with admin rights by definition can workaround most (if not all) protections we attempt to implement.

1 Like
3

Hi Aram,

Thank you so much!!!
The command in the link you provided seems accomplish what we want.
Yes, those with admin rights will find a way.