IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

App Control: Automatically Move Computer to a Policy After Initialization

App Control: Automatically Move Computer to a Policy After Initialization

Environment

  • App Control Console: All Supported Versions

Objective

To setup rules that automatically move a computer from a low enforcement policy to a high enforcement policy after the initialization completes.

Resolution

  1. Create an Install policy. This is the low enforcement policy which the event rule, suggested below, will be looking for.
  2. Navigate in your console to Rules > Event Rules and add a new rule. Enter the rule settings below:
    • Name: <Enter the Name of the Rule>
    • Description: <Enter the Description>
    • Status: It is highly recommended you test this in "Simulate Only" until you've verified it will work for your current process. Then move it into "Enabled"after testing.
    • Event Properties:
    • Subtype: is Cache Check Complete
    • Policy is <Enter the name of the Install Policy you created in Step 1>
    • Filter: None
    • Action: Move Computer (If this option is greyed out, or missing see related content)

Additional Notes

Warning: It is highly recommended that you test the rule using the "Simulate Only" status prior to enabling.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-03-2020
Views:
1344
Contributors