Environment
- Carbon Black Cloud: All Versions
- Microsoft Windows: All Supported Versions
- Initial deployment via GPO
Objective
Configure GPO to allow future sensor upgrades upgrades from GPO, Console, SCCM, manual, etc...
Resolution
Disconnect Sensors from the Group Policy
- Select Start > Administrative Tools > Group Policy Management > and select the Group Policy Object (GPO)
- In your GPO select Computer Configuration > Policies > Software Settings > Software Installation
- Right-click the Cb Defense Sensor package
- Select All Tasks > Remove...
- Select Allow users to continue to use the software but prevent new installations
- Click OK
Additional Notes
- Selecting "Allow users to continue to use the software but prevent new installations" will remove the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt\{CB Defense GUID} registry key without uninstalling the current version of the sensor. This allows future sensor upgrades from GPO, Console, SCCM, manual, etc...
- To confirm the registry key is removed by going to regedit, going to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt, and search for CB Defense, PSC Sensor, or Carbon Black Cloud If no results are found, the key is removed.
- CB Defense Sensor 3.2.x.x introduced additional checks prior to upgrade to verify that sensors initially installed via GPO are configured by GPO to allow the updates to be pushed from the Cloud or installed manually. CB Defense: Unable to upgrade to Sensor 3.2+ (GPO) (Carbon Black Cloud Sensor: Unable to upgrade Error - Incorrect parameters for GPO upgrade.)
Related Content