Disable Global Protect Auto Start on Windows

[J.Duncan336057]

Anyone know how to disable the Global Protect agent auto start on windows machines?

We want our users to have to manually start Global Protect when they need/want to connect to the VPN while out of the office, instead of it starting itself and trying to connect the VPN automatically.

We are sure its a regedit key but can't seem to find it in the Admin guide.

Apprecaite your support.

[tvang · Accepted solution]

Go to your portal configuration, select Agent, select your agent configuration, select the App tab, and then set the Connect Method to "On Demand". This doesn't prevent the agent from starting up when Windows boots up but it won't attempt to establish the VPN unless the user specifically triggers it.

[J.Duncan336057]

Thank you for your quick responce.

I was also able to find an MSI configuration item, which we have applied and tested works as required.

[scion-powdery-take]

Hi all, I think I may have a better solution to this issue - hope it helps!

If open the Services app, and look for one called PanGPS, with a description of Palo Altos Networks GlobalProtect App for Windows.

Right click on the listing and select Properties. This will open a dialogue box.

Under the General tab, you will see a dropdown box called Startup Type, set this to manual and this will prevent the Global Protect VPN App (Service) from running at startup unless the user specifically open the app.

Hope this helps people who only want it to run on demand.

NB: it appears under the latest version to have migrated from task manager startup apps to a service (hence is a little harder to disable at startup)