Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

CB Defense: Why Can't I Bypass The Sensor Even With "Allow user to disable protection" Turned On?

CB Defense: Why Can't I Bypass The Sensor Even With "Allow user to disable protection" Turned On?

Environment

  • CB Defense Sensor: All Versions
  • Microsoft Windows: All Supported Versions

Question

Setting for "Allow user to disable protection" is turned on in the Policy. Why do some users not see the Protection: On/Off toggle or button show up?

Answer

The sensor is installed on a per-system basis and not per-user. As such, the sensor performs a check to see if the system is configured to allow multiple users to log onto the machine at the same time. If that is the case, the toggle will not show up to prevent a single user from disabling protection for all users of that system.

Additional Notes

  • This has primarily been reported on virtual machines configured for a Virtual Desktop Infrastructure deployment and terminal servers, but has also shown up on physical machines which allow for multiple users to be logged-on at the same time. If you are seeing this issue and are not sure whether a given system is configured this way, please Open a Support case for additional assistance.
  • The Protection toggle does not display on terminal servers
  • This setting applies to version 2.x and later sensors only
  • The users' ability to disable protection cannot be removed from 1.0.x sensors
  • The "Allow user to disable protection" policy option is grayed out unless "Show Sensor UI: Detail message" is enabled

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎01-31-2019
Views:
439
Contributors