We keep most of our device policies set to not allow access to the console. Due to this, I have to do everything via the console. This generally isn't a big deal. However, I recently ran into an issue where a PC hadn't checked in with the console for one and half months. I could save a log and see that it was still scanning on the PC, however I couldn't:
- Force it to check in with the console.
- Change the policy in the console and it update on the PC.
- Uninstall it via the console.
With all these options unavailable to me, I tried uninstalling it directly on the PC. It refused to allow me to do this, even when I was logged in as a Domain Admin. I understand not allowing the user to uninstall it, but as a Domain Admin I should be allowed to. There needs to an override that allows Admins to uninstall the software in situations like this.