Determine if Global secure access client is active for users

Question

We implemented Global secure access successfully.

However, a big concern for us is the option for users to disable the Global secure access client on the machine.

Is there a way to configure the dashboard so it shows us who has an active client or not ? Or could we altogether prevent users from disabling or enabling the client ?

Answer 1

Hello @Louis Siepen,

Based on your description, I understand that you're looking for a way to view the devices using the Global Secure Access (GSA) client that are active in your network.

You can find this information in the Global Secure Access Dashboard, which provides a summary of the number of users and devices using the service, as well as the applications secured through it.

Global Secure Access dashboard

Regarding your concern about users enabling or disabling the GSA client themselves:

To prevent users from enabling or disabling the GSA client, administrators can configure specific registry keys to control this functionality. This can be managed through Mobile Device Management (MDM) solutions, such as Microsoft Intune or Group Policy, by modifying the following registry key:

Registry Path: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Global Secure Access Client

Key: HideDisableButton Type: REG_DWORD Values:

• 0x0 – Show the Disable action (users can disable the client).
• 0x1 – Hide the Disable action (non-privileged users cannot disable the client).

When the Disable action is hidden, standard users will not be able to turn off the Global Secure Access client.

For more details, refer to the official documentation:

Install and Configure Global Secure Access Client for Windows

Please let me know if you need any additional details on this or if you are exploring any other approach.