IMPORTANT: This site is planned to be decommissioned in 2026. Visit the Tanium Resource Center for all Tanium release notes, user guides, and support information. To view release notes in the Resource Center, see Tanium Release Notes.
IMPORTANT: If you are using semi-annual releases for on premises, see the Release notes for 2024H1 semiannual release, Release notes for 2024H2 semiannual release, or Release notes for 2025H1 semiannual release on the Tanium Resource Center.
Effective October 15, 2024: On prem release notes on the Tanium Knowledge Base are frozen. For release notes related to 7.4 or 7.5 Server and Solutions, see the Monthly updates for Tanium Version 7.4 and 7.5 Server and Solutions on the Tanium Resource Center.

ClientServiceHardening 2.1.0.0021 en

From Tanium Knowledge Base
Jump to navigation Jump to search


Introduction: clientservicehardening

Download Location

This content is available at: https://content.tanium.com/files/published/ClientServiceHardening/2016-09-13_07-23-34_2.1.0.0021-g75b3b26/ClientServiceHardening.xml

Usage

Dashboard Groups

Client Service Hardening

Dashboards:

Actions

Control Service State Permissions

Saved questions:

Hide From Add-Remove Programs

Saved questions:

Questions

Tanium Client Hidden From Add-Remove Programs

Get Tanium Client Uninstall Hidden contains Yes from machines where Tanium Client Uninstall Hidden contains Yes
Packages:

Tanium Client Service Control Permissions

Get Tanium Client Service Control Status contains "Service Control" from machines where Tanium Client Service Control Status contains "Service Control"
Packages:

Tanium Client Visible in Add-Remove Programs

Get Tanium Client Uninstall Hidden contains No from machines where Tanium Client Uninstall Hidden contains No
Packages:

Packages

Client Service Hardening - Allow Only Local Admins to Control Service

This package contains 1 files and 0 sensors.

Additional Properties:

  • Command Line: cmd /c cscript.exe allow-only-admins-to-control-service.vbs
  • Command Line Timeout: 900

Files:

  • allow-only-admins-to-control-service.vbs

Client Service Hardening - Allow Only Local SYSTEM to Control Service

This package contains 1 files and 0 sensors.

Additional Properties:

  • Command Line: cmd /c cscript.exe allow-only-local-system-to-control-services.vbs
  • Command Line Timeout: 600

Files:

  • allow-only-local-system-to-control-services.vbs

Client Service Hardening - Hide Client from Add-Remove Programs

This package contains 1 files and 0 sensors.

Additional Properties:

  • Command Line: cmd /c cscript.exe hide-client-from-add-remove.vbs
  • Command Line Timeout: 600

Files:

  • hide-client-from-add-remove.vbs

Client Service Hardening - Reset permissions on Tanium Client directory

This package contains 1 files and 0 sensors.

Additional Properties:

  • Command Line: cmd /c cscript //T:60 reset_directory_permissions.vbs
  • Command Line Timeout: 600

Files:

  • reset_directory_permissions.vbs

Client Service Hardening - Set SYSTEM only permissions on Tanium Client directory

This package contains 1 files and 0 sensors.

Additional Properties:

  • Command Line: cmd /c cscript //T:60 modify_directory_permissions.vbs
  • Command Line Timeout: 600

Files:

  • modify_directory_permissions.vbs

Client Service Hardening - Set Service Permissions to Defaults

This package contains 1 files and 0 sensors.

Additional Properties:

  • Command Line: cmd /c cscript.exe set-service-permissions-back-to-default.vbs
  • Command Line Timeout: 600

Files:

  • set-service-permissions-back-to-default.vbs

Client Service Hardening - Show Client in Add-Remove Programs

This package contains 1 files and 0 sensors.

Additional Properties:

  • Command Line: cmd /c cscript.exe show-client-in-add-remove-programs.vbs
  • Command Line Timeout: 600

Files:

  • show-client-in-add-remove-programs.vbs

Sensors

Tanium Client Service Control Status

Returns whether the Tanium Client service has special permissions set such that regular users, or non-SYSTEM users, can control the service.
Example: Service Control Restricted to Administrators

Tanium Client Directory Permissions

Returns the current status of the Tanium Client directories permissions and if they have been set as restricted to SYSTEM.
Example: Restricted - SYSTEM

Tanium Client Uninstall Hidden

Returns whether the Tanium Client is hidden from the Add-Remove programs list.
Example: Yes

Retrieved from "https://kb.tanium.com/wiki/index.php?title=ClientServiceHardening_2.1.0.0021_en&oldid=23865"