To prevent editing of the configuration in the Ginaconfig.exe one should deny access to the application or the folder in which it resides via group membership and folder permissions.
The default location of ginaconfig.exe is located at the path C:\Program Files\One Identity\Defender\Desktop Login\ginaconfig.exe in newer versions of Defender.
In older versions, it would be located at this path: C:\Program Files\Dell\Defender\Desktop Login\ginaconfig.exe.
For example, the permissions for read, write, and execute could be removed from all users besides a group for Administrators for the Desktop Login folder, which would then disallow access to the contents. This permission policy can be enabled and rolled out by Group Policy.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center