Enable lockdown mode to require that all configuration changes go through vCenter Server. You can also enable or disable lockdown mode through the direct console user interface.
Open a vSphere Client session to a vCenter Server system.
- Select the host in the inventory panel.
- Click the Configuration tab and click Security Profile.
- Click the Edit link next to lockdown mode.
The Lockdown Mode dialog box appears.
- Select Enable Lockdown Mode.
- Click OK.