33.1 Enable Client Self Defense for Endpoint Security Agent

Client Self Defense protects the Endpoint Security Agent from being shut down, disabled, or tampered with in any way. If a user performs any of the following activities, the device is automatically rebooted to restore the correct system configuration:

  • Using Windows Task Manager to terminate any Endpoint Security Agent processes.

  • Stopping or pausing any Endpoint Security Agent services.

  • Removing critical files and registry entries. If a change is made to any registry keys or values associated with the Endpoint Security Agent, the registry keys or values are immediately reset.

  • Disabling NDIS filter driver binding to adapters.

Select one of the following options:

  • Yes: Enables Client Self Defense.

  • No: Disables Client Self Defense.

  • Inherit: If the policy’s Inherit from Policy Hierarchy setting is enabled, inherits this setting value from other Security Setting policies assigned higher in the policy hierarchy. For example, if you assign this policy to a user, the setting value is inherited from any Security Setting policies assigned to the user’s groups, folders, or zone.