This article applies to:

• R3000

Question:

authenticat.exe shows up as a listed service in Task Manager. How can I prevent user tampering?

Reply

Since 8e6 Authenticator is a process that needs to run on a workstation, it will show up in Task Manager as "authenticat.exe".

If this process is killed or ended, then the active LDAP profile will be dropped and a LOGOFF event will be recorded in the User Name Log. Thus the user will be filtered by an unauthenticated profile, i.e. IPGroup or Global Group.

In case a user decides to tamper with the services, here are a few suggestions:

1. Make the profile for an unauthenticated user more restrictive, so if a user does try to break authentication by killing the process, they will be dropped to an even more restrictive profile. This can be setup using the Global Group Profile or an IPGroup Profile.

2. Make sure the user does not have local admin rights to be able to kill any process.

This article was previously published as:

8e6 KB 276497