Agent Protection settings in Zecurit are designed to safeguard the Zecurit Agent from unauthorized tampering or termination by end users. These security measures help ensure the agent remains active and functional on all managed endpoints, maintaining consistent device monitoring and policy enforcement.
Only the Super Admin can enable or modify Agent Protection settings.
What Agent Protection Prevents
Once Agent Protection is enabled, the following actions are restricted on all enrolled endpoints:
1. Prevent Agent Uninstallation via Control Panel
- Blocks users from removing the Zecurit Agent through:
- Windows Control Panel > Programs and Features
- Apps & Features settings
- Purpose: Ensures the agent cannot be uninstalled without Super Admin authorization.
2. Prevent Agent Service from Being Stopped
- Disables users from stopping the Zecurit Agent’s background services through:
- Windows Services (services.msc)
- CLI commands (e.g: net stop)
- Purpose: Keeps critical agent processes running at all times to maintain uninterrupted management and monitoring.
3. Prevent Agent Termination via Task Manager
- Prevents users from force-stopping agent processes using:
- Windows Task Manager
- Third-party process management tools
- Purpose: Protects against intentional or accidental termination of the agent.
Important Notes
- These protections are enforced at the endpoint level and are intended to maintain the agent’s integrity and continuity.
- Only Super Admins can:
- Enable or disable these protection settings.
- Initiate remote uninstallation or agent termination through the Zecurit console.
Best Practices
- Enable all three protections on production devices, especially in enterprise or high-security environments.
- Combine Agent Protection with Session Settings and IP Restrictions to further harden endpoint security.
- Notify users in advance if strict enforcement policies are applied, to avoid unnecessary support tickets.