How can I disable or turn off all security features of WithSecure Elements Endpoint Protection for Computers and Servers?

Issue:

How can I disable, deactivate or turn off all security features of of WithSecure Elements Endpoint Protection / Elements Agent (EPP for Computers and EPP for Servers)?

Resolution:

By default a local user is not allowed to turn off all security features from the local Elements Agent user interface. You will need to allow this from the profile that is in use on the device. 

How to edit a device profile to allow a local user to stop all security features:

1. Log in to the Elements portal: https://elements.withsecure.com
2. Go to the Security Configurations > Profiles page from the menu on the left
3. Select the profile you want to edit
4. Go to the General settings page 
5. Scroll down to the bottom to the Security features section and enable Allow user to turn off all security features 
6. Click Save profile 

Once the profile has been taken into use, from the local of WithSecure Elements Agent user interface, a user can click on the three dots and select Turn off all security features. 

Note: If password for uninstallation is enabled, the same uninstallation password is required to be entered when turning off the security features. 

Alternatively, you can remotely using an operation stop the security features temporarily:

1. Log in to Elements Security Center portal
2. Go to the Environment > Devices page from the menu on the left
3. Select the device (a menu will appear from the bottom of the page)
4. Click Turn off security features > Turn off all security features
5. Select the time and then confirm the action by clicking "Turn off"

Please note that if you select a time, for example 5, 15 or 30 minutes, the security features will not be automatically turned on after computer restart. The security features will be automatically turned on after the set time limit has been reached. 

If you want to have the security features to turn on automatically at computer restart, you need to select the "computer restart" option. 

All security features can also be turned off using a Command Prompt by stopping the F-Secure Ultralight Hoster (fsulhoster) service. Simply run in the command line:

• net stop fsulhoster 
• net start fsulhoster

Note: Tampering Protection (Resource Protection) needs to be disabled in the Elements Endpoint Protection profile to allow a local user to stop and start services.