App Control Server: Domain Controller Logon Scripts rapid config not marking files as approved

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Files which are allowed to run using the Domain Controller Logon Scripts rapid config, are not marked as Globally Approved in the console

Environment

• App Control Console: All Supported Versions
• App Control Agent: All Supported Versions

Cause

The Domain Controller Logon Scripts rapid config is an "Allow" type rule, not an "Approve" rule. It will only allow the scripts to run, from the location that the rule matches; It will not globally approve the files to be run in other locations.

Resolution

This is functioning as designed. The file can be approved using other methods such as by Hash.