IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Carbon Black Cloud: How to Troubleshoot GPO Sensor Installations

Carbon Black Cloud: How to Troubleshoot GPO Sensor Installations

Environment

  • Carbon Black Cloud Windows Sensor: All Supported Versions
  • Microsoft Windows: All Supported Versions

Objective

How to troubleshoot if Group Policy installs of the sensor are not working

Resolution

  1. Enable MSI Logging via GPO in Carbon Black Cloud: How to Configure GPO to Create Sensor MSI Log
  2. Review Microsoft documentation on deploying via GPO like Use Group Policy to remotely install software - Windows Server to confirm GPO is setup correctly
  3. Review the system event log after reboot for group policy events with error codes like %%1274 to review why GPO is failing to push the sensor install
  4. Check the application event log for msiinstaller events on the system after reboot to confirm if the install is actually failing and if so gather/check the install logs

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎04-05-2023
Views:
716
Contributors