topic Disable Global Protect Auto Start on Windows in GlobalProtect Discussions

Disable Global Protect Auto Start on Windows

J.Duncan336057 — Wed, 25 Sep 2024 00:46:27 GMT

Anyone know how to disable the Global Protect agent auto start on windows machines?

We want our users to have to manually start Global Protect when they need/want to connect to the VPN while out of the office, instead of it starting itself and trying to connect the VPN automatically.

We are sure its a regedit key but can't seem to find it in the Admin guide.

Apprecaite your support.

Re: Disable Global Protect Auto Start on Windows

tvang — Wed, 25 Sep 2024 14:13:46 GMT

Go to your portal configuration, select Agent, select your agent configuration, select the App tab, and then set the Connect Method to "On Demand". This doesn't prevent the agent from starting up when Windows boots up but it won't attempt to establish the VPN unless the user specifically triggers it.

Re: Disable Global Protect Auto Start on Windows

J.Duncan336057 — Thu, 26 Sep 2024 00:31:33 GMT

Thank you for your quick responce.

I was also able to find an MSI configuration item, which we have applied and tested works as required.

Re: Disable Global Protect Auto Start on Windows

scion-powdery-take — Fri, 19 Dec 2025 00:18:44 GMT

Hi all, I think I may have a better solution to this issue - hope it helps!

If open the Services app, and look for one called PanGPS, with a description of Palo Altos Networks GlobalProtect App for Windows.

Right click on the listing and select Properties. This will open a dialogue box.

Under the General tab, you will see a dropdown box called Startup Type, set this to manual and this will prevent the Global Protect VPN App (Service) from running at startup unless the user specifically open the app.

Hope this helps people who only want it to run on demand.

NB: it appears under the latest version to have migrated from task manager startup apps to a service (hence is a little harder to disable at startup)