LSPush Secure Logon Script

[albert7c]

This is a bit of a technical question rather than a Lansweeper question, but nevertheless.

I've setup LSPush agents on local machines that run on logon/startup of a machine because users setup their own firewall and prevent Lansweeper scanning. These users have administrative access and could easily remove the script.
I've heard that there are ways to prevent or notify the system administrators that the user has done so : whether it be removing/disabling the logon/startup script or removing the LSPush.exe executable.

Does anyone know how to notify the network administrators of the users' actions?

Thanks!

[albert7c]

You may delete/move this thread to solved

[Hemoco]

This is more a business problem instead of a technical problem.

1) Make a company policy.
2) Punish people not following the policy on purpose.

[albert7c]

That would mitigate the deletion problem, but the users could still go into gpedit.msc and remove the local logon script.

[Hemoco]

You can please lspush on a shared drive drive with read-only access for the user and point the logon script to this location.