Follow these steps to prevent local and domain administrators from logging on to SMEX (Find the attached steps for your reference).
- Add the following key and set it to "1".
Path: HKLM\SOFTWARE\TrendMicro\ScanMail for Exchange\CurrentVersion
Key: DisableLocalAdminHasFullPermission
Type: REG_DWORD
Data value:
"0" = SMEX allows local and domain administrators to log on to the web console.
"1" = SMEX does not allow local and domain administrators to log on to the web. - Restart the ScanMail Master Service.
This hidden key will block users from logging on to the SMEX web console using any local administrator account and allow only the accounts specified in the "Access Control > Administrator" group.