For public machines like this I would recommend not showing the Aclient icon (I'm pretty sure this isnt an option for the vista DAGENT but works with XP and below). I'd then block access to browsing the local disk drives. I suppose you could also just prevent the specific group that the students belong to from even being able to read the folder that the aclient is installed. As long as they're not an admin killing the process or stopping the service wouldnt be an issue either. Hope this helps.

Craig

We just hide the aclient from the user. It does not show in the sys tray.
Agent settings-security-hide agent.

Here are a couple of options you might consider, if you have not already:

* Password protect the aclient sys tray icon.
* Hide the icon (so they don't realize it running).
* You can also modify local and/or domain level group policy to keep the aclient running.

Can you elaborate more on it??

I'm also having this problem and don't know how to solve it

already done password protect, and hide icon, disabled task manager. and yet they are still enable to kill the process

You can also try using the subinacl.exe utility. It can prevent students from stopping and/or disabling Altiris services (or any other services).

Darryl

It would also be pretty easy to write a script to check the processes to see if the client is running and start it if it's not. Much easier in my opinion than the ACL option or switching the rights on the services. It just depends on how confident you are with scripts, either way some sort of script will have to be used.

If you create/copy a script file to your Domain Level Group Policy where the users can not modify it (Unlike a Local GPO). If they keep stopping the services just force there machine to check in with the Domain Level Group policy every "X" minutes to re-enable the services they are stopping.