Login to participate
Endpoint Management & Virtualization DownloadsRSS

Disable Altiris Deployment Solution Client from Accessing User Properties

jamesmax's picture

I noticed that somehow users were disabling the Altiris client and figured out how to stop it (at least in this case). The most current version of DS Aclient, always allows the user to right-click on the client tray (which you can hide in the admin settings) and select user properties. Then, they can disable the client.

You can disable this with a registry setting. I have exported the Altiris job to make the change (see the attachment is a txt file, but it needs to be renamed to bin, which is what you import into the DS console). This is a sweet job that I use on each new computer.

This is it too:

'vbscript
' The script disables user properties to altiris client

Dim objShell, RegKey
Set objShell = WScript.CreateObject("WScript.Shell")
On Error Resume Next
RegKey = "HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\Client Service\RequirePasswordForUserProp"

objShell.RegWrite RegKey,"1","REG_DWORD"

WScript.Quit

Antonp's picture

Nice Script Utility

This is a nice script Utility that works the same as the initial setup/configuration of the aclient. So there are now 2 ways of doing this, using your script or just set a password and hide the system tray icon from the word go when the client is installed. 

Technical Consultant
Http://www.alttech.co.za

ianatkin's picture

Nice tip -I never knew you

Nice tip -I never knew you could actually do this! Password protecting the admin properties is pretty standard, but I didn't think it possible on the user side.

Antonp -can you let us know what options allow you to do this in the .inp file? I've had a quick gander again at my sample aclient.inp and nothing is leaping at me.....

Kind Regards,
Ian./

Ian Atkin
Senior Developer for the ICT Support Team,
Oxford University, UK

jamesmax's picture

Hiding it in the system tray and setting a password - NOT ENOUGH

Thank you for your responses. If you require a password and hide the icon in the system tray, that will help, but the user could still access the user properties from the command line (aclient.exe -user). You need to apply the registry key too.