Preventing unauthorized uninstallation or modification of agents

Preventing unauthorized uninstallation or modification of agents

You can protect Agent for Windows against unauthorized uninstallation or modification, by enabling the Password protection setting in a protection plan. This setting is available only when the Self-protection setting is enabled.

To enable Password protection

  1. In a protection plan, expand the Antivirus & Antimalware protection module (Active Protection module for Cyber Backup editions).
  2. Click Self-protection and ensure that the Self-protection switch is enabled.
  3. Enable the Password protection switch.
  4. In the window that opens, copy the password that you need to uninstall or modify the components of a protected Agent for Windows.
    This password is unique and you will not be able to recover it once you close this window. If you lose or forget this password, you can edit the protection plan and create a new password.
  5. Click Close.
  6. In the Self-protection pane, click Done.
  7. Save the protection plan.
Password protection will be enabled for the machines to which this protection plan is applied. Password protection is only available for Agent for Windows version 15.0.25851 or newer. The machines must be online.

You can apply a protection plan with Password protection enabled to a machine running macOS, but no protection will be provided. You cannot apply such a plan to a machine running Linux.

Also, you cannot apply more than one protection plan with Password protection enabled to the same Windows machine. To learn how to resolve a possible conflict, refer to Resolving plan conflicts.

To change the password in an existing protection plan

  1. In the protection plan, expand the Antivirus & Antimalware protection module (Active Protection module for Cyber Backup edition).
  2. Click Self-protection.
  3. Click Create new password.
  4. In the window that opens, copy the password that you need to uninstall or modify the components of a protected Agent for Windows.
    This password is unique and you will not be able to recover it once you close this window. If you lose or forget this password, you can edit the protection plan and create a new password.
  5. Click Close.
  6. In the Self-protection pane, click Done.
  7. Save the protection plan.

    • Related Articles

    • Unattended installation and uninstallation in macOS

      This section describes how to install, register, and uninstall the protection agent in the unattended mode on a machine running macOS, by using the command line. Required permissions Before you initiate an unattended installation on a mac workload, ...

    • Deploy AlienVault HIDS Agents to Linux Hosts

      Important: For Linux hosts, depending on which distribution of Linux you use, AT&T Cybersecurity recommends that you download the corresponding ossec-hids-agent installer file from the OSSEC's Downloads page directly, and then follow their ...

    • Tamper Protection

      Preventing unauthorized uninstallation or modification of agents You can protect Agent for Windows against unauthorized uninstallation or modification, by enabling the Password protection setting in a protection plan. This setting is available only ...

    • Installing protection agents in macOS

      Agent for Mac This agent includes a component for Antivirus & Antimalware protection and URL Filtering. See Supported Cyber Protect features by operating system for details about supported functionality by operating system. Both x64 and ARM ...

    • Sentinel one - Installing the Windows Agent

      Make sure you have all requirements before you start the installation. For Windows Agents: If there is a web proxy between the endpoints and the Console, we recommend you configure the proxy for the Windows Agent in the installation command. If you ...