Technical Tip: FortiEDR - User Account Control Device Security compliance

Windows UAC compliance is a feature introduced in Collector 6.1+.

This feature User Account Control (UAC) – is enabled to protect the operating system from unauthorized changes.

To validate the compliance status, select the vertical ellipsis next to the compliance status notice under Device Security.

1. Validate on the collector, if the setting is set as below. This will report compliance status as Disabled. 
2. If the collector does not have a current update (see Troubleshooting below), it may also display as Disabled.

3. If the collector setting for UAC is one of the options in red below:

4. The status report should show as Enabled.

Troubleshooting:

If UAC on the device is compliant:

1. Check that FortiEDR shows a recent configuration time stamp.
2. Open the FortiEDR system tray icon and expand Advanced. 

Note:

• If the setting was recently changed, but not updated on the collector:
• A reboot may be needed for the compliance check to re-evaluate the status.