Environment
- Endpoint Standard Sensor: All Supported Versions
- Endpoint Standard Sensor UI
Objective
Prevent end users from disabling the EEDDR Sensor on macOS endpoints via Settings > Login Items
Resolution
A custom configuration profile needs to be created through Apple Configuration 2 to restrict users from disabling the Sensor. The basic format of the configuration provided below can be used.
<key>RuleType</key>
<string>TeamIdentifier</string>
<key>RuleValue</key>
<string>7AGZNQ2S2T</string>
Additional Notes
The string value "7AGZNQ2S2T" is the Team ID for the Carbon Black Cloud software.
Related Content