I was wondering if there was a way to restrict who can install the GlobalProtect client ?
As an example, at the moment if any user launches the gateway page can download and install the client on their own computer albeit they need an active account, but the thought of them being able to install it on an infected home computer does worry me. I was thinking is there a way to lock it down to domain joined computers only ?
Yes tons of it...
start here for an oveview.
Are all your users on AD. If so then you could use this for certificate generation and distribution.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!