Users stopping BES and BES Helper services

Usage and Config Platform
1

(imported topic written by SystemAdmin)

Hi,

We have installed BES client on 1000+ systems but, 100 users are stopping BES client and BES Helper service

Due to this I am not able to install patches or these system are not reporting to BES server

Is there any way we can stop users by stopping BES Client services on their own systems

Regards,

Swapnil

2

(imported comment written by mcalvi91)

I think there is a task to re-enable via the task scheduler in the bes support site.

3

(imported comment written by SystemAdmin)

If the users are clever nough to disable the Agent, they are likely to find the Scheduled Task as well.

Any way to adjust permissions on the Service so that it’s harder to stop? Maybe so that only System can stop it?

4

(imported comment written by SystemAdmin)

http://msmvps.com/blogs/erikr/archive/2007/09/26/set-permissions-on-a-specific-service-windows.aspx

Found this. Not sure if it would help. Of course, he other choice is to remove the offending users Administrator rights.

5

(imported comment written by SystemAdmin)

Attached is a task which will adjust the ACL’s of the client service.

Be careful, if you lockdown the ACL’s, you will have to unlock them BEFORE upgrading the client or the upgrade will fail leaving the client broken.

6

(imported comment written by SystemAdmin)

Thanks Daniel, i will try it and update you on this

Thank u very much

Regards,

Swapnil