Windows Agent Configuration
Under each Windows Computer Group administrators can specify global application control agent settings for the specific Computer Group.
- Details: This section contains the policy details such as name, description, and platform information.
- Show Tray Icon: This setting enables a Delinea Agent icon in the system tray. Options available at the Delinea Agent right-click menu allows you to Start JIT Elevated Access (refer to Just In Time (JIT) Access) and access the Utility menu for the Windows agent (refer to Windows Agent Utility).
Start JIT Elevated Access menu item appears in the tray only if JIT elevation is enabled for the agent. Refer to Just In Time (JIT) Access.
If Show Tray Icon is enabled and running on an endpoint before JIT elevation is activated, you need to reboot or regenerate the icon by exiting, updating the windows agent and then selecting the updated icon in C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
.
-
Self-Elevation: This section provides a configuration option to enable the Request Elevation option in the right-click context menu. An application policy will need to be enabled to define what action is applied when a user requests an elevation. The menu text can be customized via the Menu Text field.
- Default: Request run as administrator
-
Intervals: This section provides a configuration option to customize the intervals at which the agent will send application action events, ActiveX events and refreshes the client item cache (this is a legacy items for agent version prior to 10.7.0).
- Defaults:
- Send Application Action Events: 5 Minutes
- Sent ActiveX Events: 5 Minutes
- Refresh Client Item Cache (Legacy): 1 Minute
- Defaults:
-
Application Action Defaults: This section provides the option to set the display message timeout and the quarantine path.
- Defaults:
- Display Message Timeout: 5 Seconds
- Quarantine #Path: C:\quarantined files\test
- Defaults:
Advanced Settings
At the bottom of the page is a Show Advanced link.
Settings to configure:
- Policy Priority, this priority is specific to the Agent configuration policy.
- Exclusion Path, these are Global Application policy path exclusions. The setting takes the user path for each exclusion on a separate line.
Settings under Advanced Process Control should only be adjusted with assistance of support personnel and prior discussion of necessity for the environment.