How to block user disabling ENS feature

[prasunthapa]

Is there other option from  Using standard access and user interface to block the user from disabling the ENS feature.

[Blekk]

Hello 

You would like to use standard access with a password ? I think this will be an option for your as I understand.

You can log in on the client with Administrator log on.

( You find this option the policy catalog > endpoint security common )

[mpatel127 · Accepted solution]

Hi @prasunthapa,

Thank you contacting us,

@Blekk  Thank you for helping with answer, Your answer is correct. 

I am just adding one link of our publicly available document which has detailed steps mentioned for how to "Control access to the client interface". Steps are as below,

1.Select Menu → Policy → Policy Catalog, then select Endpoint Security Common from the Product list.
2.From the Category list, select Options.
3.Click the name of a policy applied on machine.
4.Configure Client Interface Mode settings on the page.
TIP: Best practice: To improve security, change Client Interface Mode to Standard or Lock client interface. Both of these options require an Administrator password to access Endpoint Security Client settings.
Changing the Administrator password invalidates the time-based password. If you change the Administrator password, save the policy, then generate a new time-based password.
5.Click Save.

You can refer detail explanation about how well you can configure "Control access to the client interface" 

Link:-https://docs.mcafee.com/bundle/endpoint-security-10.6.0-common-product-guide-windows/page/GUID-D4E34...

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Thanks and regards,
MayurKumar P

[Blekk]

Please mark as a solution

Thanks

[mpatel127]

@Blekk  Thank you again! If you find my post useful, Please give it a Kudos!

@prasunthapa 

If you find my post useful as Blekk, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" and together we can help other members?

Thanks and regards,
MayurKumar P

[prasunthapa]

@mpatel127 @Blekk 

Yes i have tried these. Can we only block the feature being being disabled and have access to exclusion settings.

[Blekk]

I think this is not able at the client side , because the exclusion list is coming from the ePO  > ENS policy.

[mpatel127]

Hi @prasunthapa,

Thank you for getting back to us for clarification,

The answer for your question is no as we have no option where we can set or select and allow particular feature and block and allow them separately.

According to my last reply:- Best practice: To improve security, change Client Interface Mode to Standard or Lock client interface. Both of these options require an Administrator password to access Endpoint Security Client settings.

If you are looking for a way to allow user to change settings whenever required then I would suggest you to use "Configure temporary access to the client interface"  >>https://docs.mcafee.com/bundle/endpoint-security-10.6.0-common-product-guide-windows/page/GUID-5EDDF...

Also please refer "Example workflow for using a temporary password"  >>https://docs.mcafee.com/bundle/endpoint-security-10.6.0-common-product-guide-windows/page/GUID-B4333...

Let us know if you have any further query and we will get back to you with clarification for same.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Thanks and regards,
MayurKumar P