Protect Radmin Service

Fatih Teke's picture

Hello everybody.
I want to protect radmin (remote access control program) service with application and device policy.
I try it with registry attemps but i couldn't.
Am i do something wrong?
Thanks for Help
Fatih.

Vikram Kumar-SAV to SEP's picture

 http://service1.symantec.com

 http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2005051215400948?OpenDocument

RAdmin is detected by SEP as remaac.Radmin are you trying to eclude this or you are trying to acheive something else with respect to Application control ?

Celebrating 2 years as a community member....

Fatih Teke's picture

User cannot stop

Hello Vikram
Thank you for answer,
I already Exclude Remac.radmin. it is working. Some user want to stop radmin service. that's why I want to protect this service. I want user cannot stop this service. but it must to start when computer starts
Thanks
Fatih

------------------------------------------
Everything works better when everything works together.

Vikram Kumar-SAV to SEP's picture

 Edit this rule "Protect

 Edit this rule "Protect client files and registry keys"

Delete all un wanted rule entries from the left and only leave 
Client Service and Registry access.

edit both these entries and on the right hand side remove all SEP value and and enter your Radmin registry values.

Celebrating 2 years as a community member....

Fatih Teke's picture

I don't udnerstand :(

Hello Vikram
I am sorry I couldn't understand carefully.
there are 2 rules in here. all information is same in this 2 rules. one of them is allow second is block.
which number should i change? 1 or 2? or both?
and i just only change values dont delete anything ( registry access, file and folder acces etc.)
thanks.
Fatih
Capture.JPG

------------------------------------------
Everything works better when everything works together.

Vikram Kumar-SAV to SEP's picture

 Here you can specify process

 Here you can specify process or Radmin and Reg entry for Radmin


Celebrating 2 years as a community member....

Fatih Teke's picture

picture is corrupt

picture is corrupt. I cannot see it.

------------------------------------------
Everything works better when everything works together.

Vikram Kumar-SAV to SEP's picture

 

 

Celebrating 2 years as a community member....