Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: Can You Prevent the Sensor from being Uninstalled?

Carbon Black Cloud: Can You Prevent the Sensor from being Uninstalled?

Environment

  • Carbon Black Cloud Sensor: 3.x and Higher
  • Microsoft Windows: All Supported Versions
  • Apple macOS: All Supported Versions

Question

Can a Carbon Black Cloud administrator prevent endpoint users from uninstalling the Windows or macOS Sensor?  

Answer

Yes, this functionality exists within the Windows and macOS Sensors. To enable it:
  1. Create or modify a Sensor Group Policy (Enforce Menu > Policies)
  2. Click on the Sensors sub-tab.
  3. Enable (check) the 'Require code to uninstall sensor' option. 
  4. Save the updated policy.
  5. Assign the policy to the sensor group you would like to have this functionality.

Additional Notes

  • The uninstall code can be found under the Inventory menu > Endpoints.  Click on the ' > ' icon beside the endpoint to see the uninstall code.   

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎04-18-2022
Views:
133
Contributors