Netskope Client disabled by User, how to enable via command line?

[nduda]

You can't. I've been trying to work with Netskope for ~2 years on better improvements with how agent interactivity is done from the desktop. They really don't seem to understand how a product like Netskope, when impacted, can bring a company to its knees. Having easy ways to have employees disable the agent for short timer periods or a way admins can interact with it from CLI is crucial. The only workaround are to block internet traffic. The only way to enable the client when a user disables it is through the console. We've had outages with Netskope in the past that took hours and hours to get our users "disabled"

[mpray]

Hello Dbell and welcome!

Unfortunately, there isn't an option to enable the client via command line after the user has disabled it. Currently that must be done via the console (see attached for how). We understand that this is not always the most convenient way to address this issue and have plans to implement the command line option in the future. I've included the NPLAN for your reference.

Enable the NS Client via command line on Windows hosts after disable (NPLAN-139)

Another option is to not allow the user to disable the client so that Netskope Admins can maintain control over that. That is a setting in the client config. We have a feature coming soon where an admin can configure the client to reenable itself after X amount of time once it's been administratively disabled.

[qyost]

---

@mpraywrote:

Hello Dbell and welcome!
Another option is to not allow the user to disable the client so that Netskope Admins can maintain control over that. That is a setting in the client config. We have a feature coming soon where an admin can configure the client to reenable itself after X amount of time once it's been administratively disabled.

---

Another option, beyond just removing the ability to disable, you can control whether the user has the ability to disable through client config. Set two client configs, with the difference being that toggle. Place the disabled state into the default config, then control application of the enabled config through group membership.