How do we disable the shutdown agent command?
We want to install Webroot onto our Hyper-v, Exchange and AD servers but we don't want the AV admins to be able to shutdown (or reboot) these servers.
I can see that we can set up sub-administrators who don't have the permissions to issue commands but our global admin can bypass all of the security we have setup in AD to stop them accessing certain servers. And access to these commands (and logging in) does not seem to be alertable nor auditable (outside of the console).
Is there a way we can globally or selectivity disable/remove agent commands?
Is there a way to alert on logons?
Is there a way to alert on command actions?
Is there a way to export the logs?
Thanks,
martin
Userlevel 7
- How do we disable the shutdown agent command? The article below can provide more information about the options available to you here.
http://live.webrootanywhere.com/content/1344/Editing-Site-Admin-Settings
-We want to install Webroot onto our Hyper-v, Exchange and AD servers but we don't want the AV admins to be able to shutdown (or reboot) these servers.
This is something that we do not have the functionality for.
-Is there a way we can globally or selectivity disable/remove agent commands?
No, you need to choose who to give ther permissions to and train them on proper use.
-Is there a way to alert on logons?
No, but you can view this in the console.
-Is there a way to alert on command actions?
No, but you can view this in the console.
-Is there a way to export the logs?
What logs are you looking to export.
I would advise takinig a look at the articles located at http://live.webrootanywhere.com/content/751/Preparing-for-setup for more information about whats available to you, and any limitations. You can also reach out directly to our support team and they can go into more detail about this for you.
Enterprise Number: 1-800-870-8102 Option 2
Enterprise Support: https://mysupport.webrootanywhere.com/supportwelcome.aspx?SOURCE=ENTERPRISEWSA
Regards,
http://live.webrootanywhere.com/content/1344/Editing-Site-Admin-Settings
-We want to install Webroot onto our Hyper-v, Exchange and AD servers but we don't want the AV admins to be able to shutdown (or reboot) these servers.
This is something that we do not have the functionality for.
-Is there a way we can globally or selectivity disable/remove agent commands?
No, you need to choose who to give ther permissions to and train them on proper use.
-Is there a way to alert on logons?
No, but you can view this in the console.
-Is there a way to alert on command actions?
No, but you can view this in the console.
-Is there a way to export the logs?
What logs are you looking to export.
I would advise takinig a look at the articles located at http://live.webrootanywhere.com/content/751/Preparing-for-setup for more information about whats available to you, and any limitations. You can also reach out directly to our support team and they can go into more detail about this for you.
Enterprise Number: 1-800-870-8102 Option 2
Enterprise Support: https://mysupport.webrootanywhere.com/supportwelcome.aspx?SOURCE=ENTERPRISEWSA
Regards,
Reply
Login to the community
No account yet? Create an account
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.