IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

App Control: How to Move a Connected Agent In/Out of Local Approval

App Control: How to Move a Connected Agent In/Out of Local Approval

Environment

  • App Control Console: All Supported Versions
  • App Control Agent: All Supported Versions

Objective

How to successfully move a Connected Agent in or out of Local Approval.

Resolution

Moving Connected Agents Into Local Approval Mode:

  1. Login to the Console and navigate to Assets > Computers.
  2. Locate the relevant Computer(s) and check the box next to the name.
  3. From the Action menu choose: Move to Local Approval.

Moving Connected Agents Out of Local Approval Mode:

  1. Login to the Console and navigate to Assets > Computers.
  2. Locate the relevant Computer(s) and check the box next to the name.
  3. From the Action menu choose: Restore to Normal Enforcement Level.

Additional Notes

  • Events captured while in Local Approval will be reported under the Policy, "Local Approval Policy".
  • If the Agent is in a Disconnected state the Timed Policy Override will need to be used.
  • An Event Rule can be created to automatically Restore Normal Enforcement of Connected Agents in Local Approval.
  • Local Approval is an Enforcement Level, and Policy specific configuration (Kernel Exclusions, Device Approvals, etc) will still apply.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎08-16-2022
Views:
960
Contributors