Views:

By default, the Client Privilege settings are disabled. If you enable the Client Privilege function, the security agent clients can modify and override the following settings in WFBS-SVC:

Scan Types

  • Manual scan
  • Scheduled scan
  • Real-time scan

Scheduled Scan

  • Enable or disable Scheduled Scan
  • Skip and stop Scheduled Scan
  • Postpone Scheduled Scan

Firewall

  • View firewall settings

  • Enable or disable the firewall

     
    If you enable or disable the firewall, you cannot change these settings from the Web console. If you do not grant users this privilege, you can change these settings from the Web console. The information under Local Firewall settings on the Agent always reflects the settings configured on the Agent, not the Web console.
     

Web Reputation

  • Continue browsing a malicious URL until the endpoint is restarted

URL Filtering

  • Continue browsing a restricted URL until the endpoint is restarted

Behavior Monitoring

  • View and configure Behavior Monitoring settings

Agent Alerts

  • View and configure alert settings.

Security Agent Self-Protection

  • Prevent users or other processes from modifying Trend Micro program files, registries and processes.

     
    The access permission settings of the Agent folders, files, and registry entries are inherited from the Program Files folder (for clients running Windows Vista/XP/Server 2003). Therefore, if the permissions settings (security settings in Windows) of the Windows file or Program Files folder are set to allow full read/write access, enabling this setting still allows clients full read/write access to the Client/Server Security Agent folders, files, and registry entries.
     

  • Postpones or cancels Scheduled Scan
  • Disables regular Agent upgrade and hot fix deployment

When you enable any of these features, any changes on the related settings from the Web console will no longer reflect on the security agent.

To access the Client Privileges function:

  1. Log on to the WFBS-SVC console.
  2. Go to Devices > Group (Choose a group) > Configure Policy.
  3. Select Windows / MAC > Privileges and Other Settings.
Keywords: privilege,client privileges,client privilege settings,access client privilege,enable the client privilege function