Disable Self-Service

[smandel]

Hello,

is there a way to disable self-service for certain machines?
For example, TSE machines?

Thank you.

[dcardon]

Hello smandel,

if you don't assign any self-service packages, standard users of the machine won't be offered any packages when they open it, so there's no risk there.

If you want to block it for local TSE admins, there's a parameter to add to wapt-get.ini (by default, local admins have the right to install packages).

If you want to remove the wapt self-service icon, there's no option in the installer to specify that you don't want to install it. But you can create an audit package that checks if the file exists and deletes it (and do the same for the menu entry).

Regards,

Denis

[smandel]

Hello dcardon,

thank you for your reply.
Do you have an example of an audit package?

[dcardon]

Hello smandel,

a `def audit()` function is written and works like a `def install()`, except that it's automatically re-run by the WAPT agent. You can consult the documentation here for more information: https://www.wapt.fr/en/doc/wapt-create- ... compliance

And here's an example of an audit package that checks local admin accounts on workstations:
https://store.wapt.fr/store/tis-audit-local-admins

Regards,

Denis