Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: How to Change repmgr.exe Service to Unprotected Mode (Windows)

Carbon Black Cloud: How to Change repmgr.exe Service to Unprotected Mode (Windows)

Environment

  • Carbon Black Cloud Console: All Versions
  • Microsoft Windows: All Supported Versions

Objective

How to Change repmgr.exe Service to Unprotected Mode (Windows)

Resolution

  1. Open CMD/DOS Window in Local Admin account and change directory to C:\Program Files\Confer
  2. repcli unlock <uninstall-code> (Optional if not Authenticated)
  3. repcli bypass 1
  4. repcli registerProtectedSvcs 0
  5. repcli stopCbServices
  6. sc start cbdefense
  7. sc qprotection cbdefense < verify unprotected mode, it should be none, NOTE: this command may or may not work on W2012
  8. repcli bypass 0
  9. repcli deletepolicy 1DED7E47-CE4C-448E-AD01-6F4AC3CE7F5D
  10. repcli cloud disableupdates 1

Additional Notes

To Re-Enable Protected Mode follow these steps.
  1. repcli bypass 1
  2. repcli registerProtectedSvcs 1
  3. repcli stopCbServices
  4. sc start cbdefense.
  5. repcli bypass 0

Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎02-15-2024
Views:
235
Contributors