App Control: How to use Timed Override to Move Agent into Local Approval

[#1]

Environment

• App Control Agent: All Supported Versions
• App Control Console: All Supported Versions

Objective

This article describes how to use Timed Policy Override to move an Agent into Local Approval.

Resolution

1. Log in to the Console and navigate to Assets > Computers > relevant Computer.
2. From the Computer Details page, click the 'Policy Override' tab.
   • Verify, "Temporary Enforcement" is set to Local Approval.
   • Specify the length of time (in minutes) the Enforcement Level will remain active.
   • Specify the length of time the Code will remain valid.
   • Click, "Generate Code".
3. On the endpoint:
   • For a Windows Endpoint open a Command Prompt and enter the following commands:

     cd "C:\Program Files (x86)\Bit9\Parity Agent\"
     TimedOverride CODE
     or
     TimedOverride (then Enter, and this will ask for the code on the next line)

   • For a macOS endpoint, open Terminal and enter the following commands:

     cd /Applications/Bit9/Tools/
     ./b9cli --timedoverride CODE

   • For a Linux endpoint, open Terminal and enter the following commands:

     cd /opt/bit9/bin/
     ./b9cli --timedoverride CODE

Additional Notes

• TimedOverride.exe must be executed locally on the endpoint.
• The Timed Override code is specific to the Agent it was generated for, and the codes are not interchangeable between Agents.
• The Timed Override version of Local Approval will inherit the Device Control settings of the Policy the Agent is in.
• The Agent will remain in a Disconnected state until the expiration of the Timed Override. Rebooting the endpoint will not restore connectivity.

Related Content

App Control: How to Move a Connected Agent In/Out of Local Approval