Carbon Black Cloud: Can You Prevent the Sensor from being Uninstalled?

[#1]

Environment

• Carbon Black Cloud Sensor: 3.x and Higher
• Microsoft Windows: All Supported Versions
• Apple macOS: All Supported Versions

Question

Can a Carbon Black Cloud administrator prevent endpoint users from uninstalling the Windows or macOS Sensor?  

Answer

Yes, this functionality exists within the Windows and macOS Sensors. To enable it:

1. Create or modify a Sensor Group Policy (Enforce Menu > Policies)
2. Click on the Sensors sub-tab.
3. Enable (check) the 'Require code to uninstall sensor' option. 
4. Save the updated policy.
5. Assign the policy to the sensor group you would like to have this functionality.

Additional Notes

• The uninstall code can be found under the Inventory menu > Endpoints.  Click on the ' > ' icon beside the endpoint to see the uninstall code.   

Related Content

Require Codes to uninstall Sensors at an Endpoint