Managed Devices - Single Key

[TekTrax]

(Concerning Remote Servicing Computers that use MWB Premium with a single multiple device key) - I've come across several instances where it would be necessary when a device is removed from an accounts "Managed Devices List", it is also permanently deactivated at the target device rather than the target device MWB installation reactivating itself on its next restart.  This permanent deactivation should only be reactivated via manual reactivation by the original owner (as in remote provider/servicer), or by the purchase of new activation key either by the controller or the user of the device.  This prevents instances where a target device shows up in the managed device list causing a reduction in the number of devices listed, or an "exceeded device limit".  The causes for permanent deactivation in this manor are numerous from a remote servicing standpoint.  Some are related to theft, unauthorized clone or system restorations, deactivation at the request of the original user, unauthorized uninstallation/reinstallations, and unauthorized use of the key found in the account information; just to name a few.  I would be extremely interested in your take on this and if this has already been done and I've missed notification and/or documentation, I'd appreciate knowing where this information is. Thanks for all your unending and good works.  TektTrax

[TekTrax]

Sorry, should have said, "Reduction in the number of Available devices listed".....

[AlexSmith]

@TekTrax I understand the issue you are bringing up and appreciate the feedback. Essentially, the Malwarebytes My Account site does not force uninstallation of Malwarebytes Premium on the actual device but rather deassociates the license seat. As soon as that device attempts reactivation with the stored/cached license, it reclaims that seat thus creating the situation you describe.

With that being said, it sounds like that you are a Managed Service Provider that does remote services for sites full of devices running Malwarebytes Premium. Is that a safe assumption? If so, the struggles you are encountering can be avoided and properly managed by using our MSP focused platform Malwarebytes OneView. It's purposed built to allow an MSP to deploy and manage Malwarebytes cloud products like Malwarebytes Endpoint Protection (think Malwarebytes Premium, managed in the cloud, and uses a minimal UI on the device).

If you would like, I can get you in touch with the right teams here to help discuss utilizing OneView for supporting and managing your clients.

[TekTrax]

I appreciate your prompt response.  MSP yes.  Sites full of MWBP... not exactly but I wished it were.  I'm an elder maverick 70+ Dos Dog still peckin keys.  Currently I have a 100 computer ceiling and approaching that rather quickly, taking care of two user levels; single consumers and a couple businesses.  Mostly elderly, relatives, some special need vets, and especially many who cannot afford such services for various reasons most with medical problems that require computers for medical and family communications, financial control,  researching their needs, and just plain entertainment.  All the computers I maintain I controlled from component level repair/builds/hardware mods to OS maintenance/software and the educational use of it.  Most are maintained free of charge with free security for as long as the need is realistic and of course for as long as I'm able.  I also service some businesses; not many but enough that their contributions pay for that which cannot be freely given.  In every case I use Malwarebytes Premium.  What licenses I don't provide, they're purchased by the user at my recommendation but I have control of it.  I also take care of 2 churches... one in my hometown and one in Nashville... about 15 machines between the two.

I didn't mean to suggest that MWB be uninstalled, rather downgraded to the free version with the license deleted from cache.  As I understood it, once a device is removed, it's immediately downgraded on the target computer but the license remains in cache thus creating the reactivation circumstance.  Permanent downgrading would have allowed the user to purchaser their own license if they chose and reactivate without reinstalling, leave it as is, or simply uninstall it themselves.

In any case, permanent deactivation without uninstallation would be a wonderful choice in my case and of course, I can remote/reactivate the license or activate it with a new one if needed.

As for OneView, the key problem here is business "cloud" based.  I'm not a business.  I'm seriously retired.  If I were a younger man in today's business world, OV would be a great choice but in my current situation, for those I take care of, I have to consider what are the results from my dropping out of the picture unexpectedly.  I think it best I remain simpler, less cost, fewer machines, and well, you get the picture.  I sure you're also aware of the reverse.  I have several that simply die off and the machines might disappear for a while and reappear somewhere else; another reason for the managed device downgrading.

In the meantime, although my name is not associated with most of the MWB installations I'm responsible for, and even if the modification I suggest never occurs, MWB is still top dog in my book and I'm enjoying studying and using the beta.

I have to tell you of one guy before I go.  He's an elder; retired early in life via damage to his body from being hit by a 45 mph large RV while he was walking across the pit median at a Nascar event.  He's mobility is seriously reduced; slow to move and with eyesight bad enough that 3 browsers on his laptop are VGA'd to a 27" LED all zoomed to 300%+.  At this mag, he'll search out some of the most ridiculous subjects for entertainment and you know what happens when you click on a quarter of the page when a trick prompt is somewhere else unseen.  Yep... Ransomeware and just about every threat trick known to hackers plus a few more I'd never seen before.  Prior to Malwarebytes, he was using the paid AVGs, Avast, McAfee, and a couple others and they kept me busy wearing my Clone restorations out.  Since Malwarebytes Premium and some custom settings, I still get calls that he's being hacked but they're more browser threat than onboard problem.  On his laptop, MWB keeps a list of problems prevented a mile long but I sleep better knowing that the next call I get from him is something simple like he spilled jelly and milk all across his keyboard.  Much better.

Thanks again for the quick response.  Tektrax / USA / TN

[Firefox]

9 hours ago, TekTrax said:

In any case, permanent deactivation without uninstallation would be a wonderful choice in my case and of course, I can remote/reactivate the license or activate it with a new one if needed.

I think this is a great course of action myself.  If I go an deactivate a computer from the portal, it should free up the license and not allow that said computer to re-activate.  I mean the reason I deactivated it on the portal was for that very reason.

[AdvancedSetup]

Hello @TekTrax

Welcome to Malwarebytes. Let me give you some information that you may or may not know that can really help keep these users safer online. Just takes a bit of reading and if you have any questions please let us know.

 

If you're not backing up your data and you're still using Google Chrome then you're just not serious about Privacy, Safety, and protecting your data. Malwarebytes is a fantastic program but you still need to back up your data and you still need to block scripts and Ads in your browser. 
If you're still using Google Chrome I would highly suggest you consider using Firefox instead. For more advanced users you might consider installing NoScript as well (it does have a higher learning curve though)

PrivacyTools - Encryption and tools to protect against global mass surveillance - https://www.privacytools.io

Help Secure your browsers
 
You may be interested in using our new Malwarebytes Browser Guard to help protect your browser from items that uBlock or others don't target.

Please install uBlock Origin for your browsers to better protect your system.

FireFox, Chrome, Opera , Safari, Microsoft Edge
AdBlock Plus for Internet Explorer

How to use uBlock Origin to protect your online privacy and security | uBlock Origin tutorial 2018
This video tutorial above explains how to use uBlock Origin in advanced user mode and all the advanced settings to protect your online privacy and help prevent unwanted sites from changing your browser settings

Delete Cookies Automatically

Cookie AutoDelete plugin
Chrome  | Firefox 

Browser push notifications: a feature asking to be abused
HTTPS Everywhere
NOTHING TO HIDE documentary

Review your email and Office choices

Quit Gmail for free encrypted email - Tutanota
Why ProtonMail Is More Secure Than Gmail
LibreOffice - Free and open source office suite

Use Password Management software

Bitwarden
KeePass Password Safe

Make sure you use a strong master password
Then set the key transformation settings (the link below helps provide information on how to choose good settings)
https://pthree.org/2016/06/29/further-investigation-into-scrypt-and-argon2-password-hashing
KeePass Password Manager: Full Detailed Setup (good YouTube video on setup and using Keepass but choose the Argon2 method for Key transformation)

Encrypted Instant Messenger and Voice Calls

Please review the following site for a breakdown of features of different Messenger applications.

SafeSwiss
Riot
Signal
Wire     
NOTE: Recent news of Wire having new investors and moving to the United States.
Wickr Me

Follow-up Reading

Everything you need to know about cybercrime
10 easy ways to prevent malware infection 
Keep your data backed up

Thank you for choosing Malwarebytes as your preferred security protection software and tell your friends and family too. We're here to help.

Ron