Prevent Uninstallation of FortiSIEM Windows Agent on Windows Server

[ismailurek2]

Hello Fortinet Community,

What can I do to prevent FortiSIEM windows agent from being deleted on windows server. How can I make an application about this?

Best Regards,

İsmail Ürek

[Anthony_E]

Post moved in the FortiSIEM discussion.

[ismailurek2]

We want to apply change or delete status on FortiSIEM agent with password. Is there an application for this?

Best Regards,

[Secusaurus]

Hi @ismailurek2,

Not sure if I get this correctly:

Do you want to prevent a Windows Administrator from deleting the FSM Agent from the Windows Server?

Or are we talking about something to prevent a FortiSIEM-user from changing the profile/disabling/uninstalling the Agent on the FortiSIEM GUI?

First scenario: No way outside of Windows. A full Windows Admin will always have a way to uninstall software. You will need to talk about right management/roles on the server, to restrict the user to the correct privileges.

Second scenario: This should be possible via a customized administrator profile on the FSM.

Best,

Christian