EDR Sensor: Can a non-admin user open the open the certificate store on a workstation?
search cancel

EDR Sensor: Can a non-admin user open the open the certificate store on a workstation?

book

Article ID: 285844

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Can a non-admin user open the open the certificate store file on a Windows workstation?

Environment

  • EDR Windows Sensor: All Supported Versions
  • Microsoft Windows: All Supported Versions

Resolution

No. This is by design. A regular (non-admin) Windows user cannot query the CarbonBlack cert file. 
Powered by Wolken Software