Logon Shield features changes a local Security Option on target machine

Products

• CA Client Automation - IT Client Manager
• CA Client Automation

Issue/Introduction

When Logon Shield feature is enabled during Container configuration (by selecting "Prevent user from being logged-on while job executed" under Procedure Options tab) and this particular job runs, the following Local Computer Policy is changed from Disabled (default) to Enabled:

Environment

Client Automation - All versions

Resolution

There is a DSM configuration policy that manages this behavior, which is called "Apply Windows security options", located under:

DSM -> Software Delivery -> Software Management -> Logon Shield

By setting this to Disabled, the local security policy won't be modified after the SD Jobs ends.