App Control: App Control Server not able to import a new license

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

After restarting the App Control Server service, the App Control Server is not able to import a new license file (license.lic) located in C:\Program Files (x86)\Bit9\Parity Server.
 

Environment

• App Control Server: All Versions

Cause

Lack of local administrator permissions for the App Control Server's service account.

Resolution

1. Please ensure the App Control Server's Service account has the following grants:
   1. Local Administrative Privileges
      1. Press the Win + R keys on your keyboard to open Run, enter the command compmgmt.msc, and then press Enter,
      2. Navigate to "Local Users and Groups" select "Groups" and do double click on "Administrators" group
      3. Click on the add button and look for App Control Server's Service account.
   2. Local Security Policy made sure the service account account has "Logon as Service" and "Logon as Batch"
      1. Press the Win + R keys on your keyboard to open Run, enter the command secpol.msc 
      2. Navigate to Local Policies > User Rights Assignment 
      3. Add the App Control Server's Service account in "Logon as Service" and "Logon as Batch"
2. After adding the grants open an Administrator CMD prompt and enter the below command:

gpupdate /force