AIOps

AIOps

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#ITAutomation
#AIOps
#CloudPakforAIOps
#AIOps

 View Only

  • 1.  Prevent bigfix relay

    Posted Wed April 05, 2017 07:09 PM

    Is there anything fixlet/task, computer settings etc. that can help prevent bigfix relay and client service stopping/uninstallation by any user? 



  • 2.  RE: Prevent bigfix relay

    Posted Mon April 17, 2017 05:56 PM

    Brian, here some info that should help: 

    • You can use the "Hide BES Clients from the Add/Remove Programs List - BES Client >= 8.0" Task.
    • You can use the "Automatically Restart Stopped BES Clients Using TaskScheduler" Task.
    • Install the "Install BES Client Helper Service".
    • There used to be a "Hack" available that would restrict control of the BES Client service to the "Local System" account, preventing even a Local Administrator from stopping it. It might be available on BigFix.me or you can Google it. You might also be able to do something similar to the Relay service. TEST THIS PRIOR TO PRODUCTION DEPLOYMENT, I don't think it's supported by IBM.
    • Once you have established the BES Client can't be tampered with, you can use it to enforce the installation and functioning of the BES Relay service.


  • 3.  RE: Prevent bigfix relay

    Posted Tue April 18, 2017 03:15 PM

    ok - thanks for these pointers.