Skip to main content
Open Desktop Agent › Settings to configure how the Desktop Agent behaves across your company.
Desktop Agent settings with the Network Fail-Safe section highlighted and credentials redacted

​
Access credentials

  • Company Access Key — employees enter this to register their Agent. Rotate it to issue a new key and invalidate every existing registration at once: all devices must re-register with the new key before they work again. Rotation is recorded in the Audit Log.
  • Exit Password — a single company-wide code a user must enter to quit the Agent. Entering it correctly stops the Agent for the current session only — it restarts automatically on the next reboot. This is a temporary pause, not removal; permanent removal goes through the Uninstaller or a Hard Delete.
Treat the Access Key and Exit Password as secrets. Rotating the Access Key forces every Agent to re-authenticate.

​
Quotas

  • Desktop Agent Project Count — how many Desktop Agent projects the company can create. Adjustable within current projects ≤ new value ≤ system allowance.
  • Agent User Count Limit — the maximum number of registered Agent Users. Can be lowered only to at or above current usage, and never above the system allowance.

​
Network Fail-Safe

Controls what installed Agents do when they cannot reach Starfort. This is a single company-wide value — set at the company level (not per project) precisely so that devices not yet assigned to any project are still covered when the network drops. It auto-recovers when the connection returns.
OptionBehavior
Fail-Open (default)Allow all intercepted requests (prioritize availability).
Fail-ClosedBlock all intercepted requests (prioritize security).

​
Before a device is assigned

An Agent that is registered but not yet assigned to a project blocks every controlled endpoint outright — the user can’t reach a governed AI service until you assign the device to a project. Once assigned, the project’s Control Profiles take over. This Settings screen also has an Unassigned Default Policy (Open / Close) toggle that controls how Agents behave before they’re assigned to a project. Set it to Open to let unassigned Agents allow all traffic until they’re assigned, or Close to block all traffic until they’re assigned. These settings appear only when both the system-wide and the company Desktop Agent features are enabled.