Top menu

Topic: «DeviceLock Service not stoppable»

« Previous topic | Next topic »

Ed Braiter


User profile

Posts: 46
Joined: 10/23/2008
Seems to affecting that system only so far. All systems [with 2 exceptions and that wasn't one of them] used DLEM to install.

DeviceLock Administrators is not enabled. No problem on a sample of other systems i checked.
Posted: 11/07/2008 17:56:59

Top

Roman Gaditskiy
Guest



Can you stop the service using Computer Management utility?
Posted: 11/07/2008 18:19:23

Top

Ed Braiter


User profile

Posts: 46
Joined: 10/23/2008
Define "Computer Management utility". Do you mean the Services applet in Administration tools in the Control Panel? If so, I can't stop it there either.
Posted: 11/10/2008 17:25:05

Top

Roman Gaditskiy
Guest



Are you sure you are a local administrator on the machine?
Posted: 11/10/2008 21:12:12

Top

Ed Braiter


User profile

Posts: 46
Joined: 10/23/2008
Yes...
Posted: 11/10/2008 23:49:23

Top

davidm
Editor


User profile

Posts: 77
Joined: 06/30/2006
Fred - It is in the best interest of DeviceLock customers to have a DL Service that protects itself from local tampering and in many cases even local admin tampering.

At the default level of security, the stop/start/pause/resume buttons of the DL Service are removed. However, it can still be removed and/or stopped by administrators by the commands shown, remotely via DL Console, via GPO, or with other local admin manipulations.

For advanced security, the DeviceLock Administrators feature can be enabled to further lock down the endpoint DeviceLock components (registry area/files/logs/service/tasks/etc) from tampering. With this settings enabled, there is no ability to locally affect DL components or functions....even if you are a local admin. Only authorized changes from the DL Consoles or GPOs will be allowed in that scenario.
Posted: 01/09/2009 21:55:02

Top