Restrict Forticlient Settings

[Syed_Mehmood_Ali]

I' m using forticlient endpoint protection with Fortigate 100D. I want to restrict users that they cannot unregister the forticlient by themselves. Is there any way to do this ? Thanks in advance

[stukat]

On the 100D go to User & device, FortiClient Profiles and add this under endpoint control: <endpoint_control> <disable_unregister>1</disable_unregister>

[Syed_Mehmood_Ali]

After this addition user can still unregister the forticlient I dont know why

[Chris_Lin_FTNT]

What version of FortiClient are you using? If that config is successfully applied, there will be a registry key FA_ESNAC\disable_unregister. Have you tried using the minimal config to disable unregister? If you still has problem, you can send your config to forticlient-feedback@fortinet.com, ask them to take a look.

[Syed_Mehmood_Ali]

What I' m trying to say is that unregister option should be greyed out or disable is that possible ? or unregister means he cannot access to internet until and unless they are registered to fortigate firewall ? forticlient' s version is 5.2.

[Chris_Lin_FTNT]

" unregister" did greyed out for me. That' s why I asked you to check the client PC to see if the config was successfully delivered to the client.

[Syed_Mehmood_Ali]

Still unregister option is not disabled. I dont know what I' m doing wrong!!

[Chris_Lin_FTNT]

Haha, looks like the pasted XML config is not complete. It has to start from the beginning and goes till the end.

[Syed_Mehmood_Ali]

Now my problem has solved Thanx