uninstall password

Avatar
  • updated
  • Archived

We would like to have the option to add a password to protect the screen connect client from being uninstalled by users with local admin privileges. I have found that when the client is installed from labtech, users don't recognize it and tend to remove it. This causes problems with the labtech SC plugin.

Duplicates 2
access agent password protection

Please consider adding the option to password protect installation of an access agent against deletion.   Some circumstances require users to have admin privilege to operate their workstation.  Either by accident or intent,  an access agent can be deleted.  By requiring a password for deletion would insure that deletion was desired and intended and eliminate the need for tedious workarounds using the registry or special utility programs.

block deinstalation screenconnect agent

How can I block the removal of the agent on a computer where the user has administrator rights?

Is it possible to make a password when trying to delete

Pinned replies
Avatar
-1
Sean White Team Member
  • Answer
  • Archived

This is a feature that we will not implement for a few reasons:

  • OS settings can be applied to prevent users from uninstalling software
  • Having a password baked into the agent to prevent uninstall could be used maliciously
    • A scammer could essentially prevent an agent from being uninstalled on an unsuspecting victim of fraud
    • A legitimate agent could be left behind if the end user no longer wishes to receive service and the service provider does not uninstall the software as part of an offboarding process.
Avatar
1
dks itservices

Wow. I am surprised this is still a request after 5 years. In my situation, there is no in-house IT personnel. A password to uninstall screenconnect is needed because while most users do not have local admin rights on their machines, there are some users who do have admin rights for whatever reasons. Having to waste time troubleshooting why you lost connection to a device, then to find out it is because the user uninstalled it is counterproductive. Even if there was in-house IT personnel, then a simple fix would allow them to know the uninstall password, if ever needed. Please can you add this request?

Avatar
0
Tilak Kumar

This will be useful feature for some corporates if you can let us choose to set this passcode when building the installer.

For corporate devices, we want to make sure certain apps are always running on devices and something like this passcode feature if it is available would be great because we normally give local admin access to some teams for development purpose and we don't want them to remove this agent without IT admin consent.

Most endpoint security agent apps has this feature of passcode to uninstall or remove agent from user devices or at least user shouldn't able to remove it unless they have some uninstaller so either of these two features is what I noticed on any endpoint manager apps.

Please review and let me know if my request makes any sense.

Avatar
1
Jstepp

It's discouraging this has been sitting here for 6 years. It would definitely be a nice feature. I was just encouraged in a support ticket to put in an enhancement request for this very thing. Here's my 2 cents. I have an admin user who is actually manually stopping the Screenconnect service. In the past, I've used Symantec Endpoint Protection, and Bitdefender Gravity Zone, and they both had the ability to password protect the agent such that it couldn't be uninstalled or stopped by even an admin if they didn't have the specific password to do so. I know this is not an antivirus program but IT WOULD BE AWESOME if we could have a way to protect the services from being stopped and the agent from being uninstalled. We are only dealing with corporate owned devices.

For reference:

https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all/managing-groups-clients-and-administrators/managing-client-computers-v55115300-d19e131/password-protecting-the-client-v9722139-d19e3958.html

https://www.bitdefender.com/business/support/en/77209-87686-install-security-agents---use-cases.html#UUID-1258bbe7-6f50-7869-484e-67f1013b1a45

Avatar
1
Kyle Simpson

Any further update on this?

Avatar
1
Ian L-F

I realize the Feature-Request portal is where most good ideas go to die but I'll +1 this.

Avatar
1
gprscrprs

I will plus one that this "is where most good ideas go to die". :(

Avatar
0
YoDawg

Might see this feature before i leave this planet

Avatar
0
Enterprise IT

I have been checking on this for years, could we at the very least get a reason what is stopping this from moving forward or provide measures such as a reg hack that might enable such a feature.

Avatar
0
Alex Heylin
Quote from Enterprise IT

I have been checking on this for years, could we at the very least get a reason what is stopping this from moving forward or provide measures such as a reg hack that might enable such a feature.

Just delete the entry in add / remove programs.  That'll deal with 99% of users who uninstall things. 


https://support.microsoft.com/en-us/topic/removing-invalid-entries-in-the-add-remove-programs-tool-0dae27c1-0b06-2559-311b-635cd532a6d5

Avatar
-1
Sean White Team Member
  • Answer
  • Archived

This is a feature that we will not implement for a few reasons:

  • OS settings can be applied to prevent users from uninstalling software
  • Having a password baked into the agent to prevent uninstall could be used maliciously
    • A scammer could essentially prevent an agent from being uninstalled on an unsuspecting victim of fraud
    • A legitimate agent could be left behind if the end user no longer wishes to receive service and the service provider does not uninstall the software as part of an offboarding process.
 Commenting is disabled

Top contributors

Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar