Technical Tip: How to lock down the FortiClient Console
Description
This article explains how to lock down the FortiClient Console so that only an administrator can modify the settings and configuration.
Scope
FortiClient.
Solution
On the FortiClient Console, it is possible to perform a lockdown for administration purposes preventing end users from modifying and changing important settings and configuration of the FortiClient.
Use the following steps to perform the Console lockdown. (Screenshots are taken from FortiClient version 4.1.2.138)
- Select the FortiClient icon to bring up the FortiClient Console. Select 'Lock Settings' in the bottom right of the FortiClient Console screen to enable the lock down for the first time. Confirm, set the administrator password, and select 'OK'.
- Once the password has been set all previously modifiable settings and parameters will be greyed out and cannot be changed. The message 'FortiClient settings have been locked by your administrator' is visible at the foot of the screen.
- To unlock the settings the Administrator must use the password set in step 1 to make the settings and parameters of the FortiClient Console modifiable again.
- To unset the lockdown password and restore the FortiClient Console, simply select 'Unlock', supply the correct password, and tick the sub parameter 'Remove Password'.
For higher version FortiClient, the lock and unlock button will be available in the bottom left corner (capture from version 7.4.2):
The unlock settings button will not be available if the FortiClient is managed by the EMS server. (In this case, the lock and unlock options will be on the System Setting Profile assigned to the endpoint, depending on how it is configured.)
