Environment
- Carbon Black Cloud Console: All Versions
- Audit and Remediation (was CB LiveOps)
- Endpoint Standard (was CB Defense)
- Enterprise EDR (was CB ThreatHunter)
- Managed Detection (was CB ThreatSight)
- Carbon Black Cloud Windows Sensor: All Supported Versions
- Microsoft Windows: All Supported Versions
Question
Does the Sensor Support Installation in User-Context?
Answer
As Carbon Black does not perform any systematic testing or qualification of sensor installation in the User-Context, there is some risk if the sensor is deployed in User-Context and support may be limited
Additional Notes
- As long as the Sensor is installed by an admin account, the sensor should technically still be able to install in User-Context or System-Context.
- Even if the sensor is installed in User-Context, the installer will elevate to system when installing the service and drivers.
- By default or at least using the instructions documented in Endpoint Standard: How to Install Windows Sensors using SCCM, SCCM will install the sensor in System-Context
Related Content
