IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

App Control: Why are users with admin rights to a computer able to stop the agent service locally with tamper protection enabled in the console?

App Control: Why are users with admin rights to a computer able to stop the agent service locally with tamper protection enabled in the console?

Environment

  • App Control: All supported versions

Question

Why are users with admin rights to a computer able to stop the agent service locally with tamper protection enabled in the console?

Answer

One possible and highly likely scenario is in the past the agent config to allow agent upgrades was enabled

Additional Notes

  • To disable navigate to agent_config.php set filter to 'value' locate the config 'Allow Agent Upgrades' and set to Disabled. 
  • This setting should only be enabled when an upgrade cycle is to begin and disabled upon completion

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎11-16-2020
Views:
385
Contributors