unlock provisioned FortiClient configuration?

[Jay_Libove]

I have a FortiClient configuration pushed by my FortiGate FG100D (FortiOS 5.0.4). I want to allow a Mac user to be able to turn on and off the antivirus component at this option. But the provisioned FortiClient config says that the config is " locked by FortiGate" . In the endpoint profile I see the option " forticlient-settings-lock: disable" . So, why is the configuration actually locked on the client? thanks,

[Chris_Lin_FTNT]

Hi, Jay, Whenever FortiClient is registered to FortiGate, on the GUI it will show " Settings are locked by FortiGate" , no matter " forticlient-settings-lock" enable or disable. When forticlient-settings-lock is disable, you can easily unregister. But when forticlient-settings-lock is enable, it will ask you for the setting lock password before you can unregister. However when FortiClient is registered, AV real-time protection is controlled by FortiGate and user cannot change it.