In addition to the tamper protection - the Endpoint Protection Logs/Live Logs displays the password in CLEAR TEXT for anyone with access to the logs to see.
This information should be either hashed out or hidden.
If a password becomes forgotten then it can be changed to something different, policies re-assigned and the issue sidestepped.
User on Windows XP can tamper the settings of EndPoint Protection.
On UTM 9 the Tamper Protection is enabled.
Just tried this on a Windows XP client(32 bits). The policy got deployed and enforced for tamper protection.
I don't know what happened with your installation but I think the policy wasn't deployed. Can you provide me with the MCS_ID(Manage Computers tab) of that endpoint and the UTM ID(Advanced tab) of your ASG box?
Other additional information you have observed could help[:)].
Related to having the tamper password protection in the clear, that will change in the following weeks. You won't get anything in the logs related to the actual password(hashed or not).
Hi rfarcas Here is the MCS_ID: be731568-d92c-a892-f934-fcfc783cdb23 And here the UTM ID: 70e10e70-1936-33ef-9384-80307bdb5a83
The policy works well, but a normal User( with local Admin Rights) can change the Policy as well. Maybe it's better, we change policy settings through Astaro and don't let a local user or Administrator that.
