Licensed Forticlient v7.2.4 - How to remove from Windows startup

[Shroom]

Platform : Win11 23H2 - Intune Managed corporate device.

Hello Everybody, hope somebody can help as I'm stuck, I work as a sysadmin and i've been tasked to disable forticlient from starting up on windows login.

We have our network fully managed by a third party company from whom we also got Forticlient from which they also manage.

They've told us that the startup config has already been configured via EMS and the software forticlient starting up is now down to us and to reconfigure the startup apps on through windows settings. I've been sent instructions, the generic one from microsoft.

This is where I'm having issues with as Forticlient itself is not showing up from teh startup list through 'settings > apps > startup', its not on 'task manager > startup' either. I found FA_Scheduler under services.msc which is set to run automatically, im trying to change it to Manual, but it kept on coming back to me with 'incorrect parameters'.

Hope somebody can help, thanks.

[Rajan_kohli]

Hi,

You can try these following steps: 

 1) Right-click on the FortiClient icon on the taskbar and select Shutdown FortiClient.

2) go to command prompt and enter: net stop fortishield [ENTER]

3) RUN -> msconfig and go to services tab. Uncheck the service FortiClient Service Scheduler and [APPLY] - Do not restart the PC now.

4) RUN -> services and search for FortiClient Service Scheduler. Right-click -> Properties and change the startup type to: Manual.

5) Reboot It

[Shroom]

Hey Rajan

Not possible as the option is greyed out and the only way to shut it down is by entering the  tamper protect password from the forticlient app where i disconnect the part where its 'managed by forticlient cloud'. once i disconnect, then i can shut down the app.

Now, even if i can set the FA_Schedulet service tgo manual, it will still require me to rejoin that app back up to 'managed by forticlient cloud' and it seems like i have no way of doing that remotely and will need to be done manually.

Unless you know of any scripts to use to do this through sccm/intune?