App Control: App Control Agent shows "Cannot connect to user agent"
App Control Agent: All Supported Versions
Microsoft Windows: All Supported Versions
Agent not connecting to console
Running DASCLI commands from CLI results in error "Cannot connect to user agent"
Agent driver or kernel filter driver is not running
Issue is usually due to one of the agent drivers (parity.exe or parity.sys) not running, or another software program (i.e. anti-virus) is injecting itself and not allowing the agent to fully start.
It is common to see a full restart of the endpoint resolve this issue. However, if this does not work:
Reboot endpoint into safe mode, and uninstall the agent there. If the agent is in any visibility or control state, tamper protection will be enabled and you will not have the ability to disable it. Re-install the agent after boot.
If the issue is persistent, gather a Procmon while the issue is happening.
Open a case with Carbon Black Support for further troubleshooting.
To determine if the drivers are loaded, please run the below commands from an admin CLI:
sc query parity (to check for service status; go to services.msc too)
sc query paritydriver (to check for driver status)
fltmc (to check if paritydriver is loaded)
fltmc instance (to check on paritydriver instances)