IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

CB Defense: Why Can't I Bypass The Sensor Even With "Allow user to disable protection" Turned On?

CB Defense: Why Can't I Bypass The Sensor Even With "Allow user to disable protection" Turned On?

Environment

  • CB Defense Sensor: All Versions
  • Microsoft Windows: All Supported Versions

Question

Setting for "Allow user to disable protection" is turned on in the Policy. Why do some users not see the Protection: On/Off toggle or button show up?

Answer

The sensor is installed on a per-system basis and not per-user. As such, the sensor performs a check to see if the system is configured to allow multiple users to log onto the machine at the same time. If that is the case, the toggle will not show up to prevent a single user from disabling protection for all users of that system.

Additional Notes

  • This has primarily been reported on virtual machines configured for a Virtual Desktop Infrastructure deployment and terminal servers, but has also shown up on physical machines which allow for multiple users to be logged-on at the same time. If you are seeing this issue and are not sure whether a given system is configured this way, please Open a Support case for additional assistance.
  • The Protection toggle does not display on terminal servers
  • This setting applies to version 2.x and later sensors only
  • The users' ability to disable protection cannot be removed from 1.0.x sensors
  • The "Allow user to disable protection" policy option is grayed out unless "Show Sensor UI: Detail message" is enabled

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎01-31-2019
Views:
675
Contributors