Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

How to disable Elements Endpoint Protection Device Control feature locally?

Issue:

Is it possible to disable or stop the Elements Endpoint Protection Device Control feature locally from the Elements Agent user interface? 

Resolution:

There is no option to in the Elements Agent Graphical User Interface (GUI) to disable Device Control.  

An option would be to stop the device control service, which can be done by runing the following command with administrator rights: net stop fsdevcon

Note: You need to first disable the Tamper Protection feature from the Elements profile before you can stop services locally. 

An Elements Security Center portal administrator can via an operation disable Device Control temporarily on a device:

  1. Log in to the Elements Security Center portal
  2. Navigate to the Environment > Devices page
  3. Select a device (a menu will appear) 
  4. Click Turn off security features
  5. Select Turn off device control
  6. Enter a time when the device control feature is automatically re-enabled
  7. Click Turn off