You can set a password to control access to the Trellix Endpoint Security (ENS) Client. Lock the Client interface so that users cannot change any settings locally.
Caution
Client Interface Mode is set to Full access by default, allowing users to change their security configuration, which can leave systems unprotected from malware attacks.
Select Menu → Policy → Policy Catalog, then select Endpoint Security Common from the Products list in the left pane.
From the Category list in the right pane, select Options.
Click the Edit link for an editable policy.
Configure Client Interface Mode settings on the page.
Best practice: To improve security, change Client Interface Mode to Standard or Lock client interface. Both of these options require an Administrator password to access Endpoint Security Client settings. Changing the Administrator password invalidates the time-based password. If you change the Administrator password, save the policy, then generate a new time-based password.
Click Save.