How to Unregister Client at Client Machine

[foshejh]

To All,

  Thank you in advance for your help on this problem.  I am rather new at configuring FortiClient using XML, so this may be a very simple question.  We have a small environment, with 10-15 clients.  Under the configuration that most clients are receiving, the following items are enabled:

Endpoint Control is enabled

Skip Confirmation is enabled

Disable Unregister is enabled

Silent Registration is enabled

  We would like all clients in the office to be forced to register to our FortiGate without any user interaction when connected to our network, thus the settings above.  There are times though, when an administrator may need to disable FortiClient though.  At the moment, the only way I know to unregister a FortiClient is through the FortiClient Monitor on the FortiGate.  Are there other ways to unregister FortiClient from the client machine?  For example, are any of the following possible?

1.) Unregister Client at Client machine using an administrator password?  Currently, the yellow lock at the top of the FortiClient Dashboard does not do anything.  Can this be configured to enter an administrator's password here?

2.) Automatically enable the option to unregister the client when not connected to the network.  In other words, if a client laptop is carried out of the office, could the user unregister and disable FortiClient at their house?  We have at least one employee that uses their own personal laptop in the office.

3.) Any other ways that you are aware of?

  Thank you again for all of your help on this matter!

Thanks,

-foshejh