CB Defense: Why Can't I Bypass The Sensor Even With "Allow user to disable protection" Turned On?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Setting for "Allow user to disable protection" is turned on in the Policy. Why do some users not see the Protection: On/Off toggle or button show up?

Environment

• CB Defense Sensor: All Versions
• Microsoft Windows: All Supported Versions

Resolution

The sensor is installed on a per-system basis and not per-user. As such, the sensor performs a check to see if the system is configured to allow multiple users to log onto the machine at the same time. If that is the case, the toggle will not show up to prevent a single user from disabling protection for all users of that system.

Additional Information

• This has primarily been reported on virtual machines configured for a Virtual Desktop Infrastructure deployment and terminal servers, but has also shown up on physical machines which allow for multiple users to be logged-on at the same time. If you are seeing this issue and are not sure whether a given system is configured this way, please Open a Support case for additional assistance.
• The Protection toggle does not display on terminal servers
• This setting applies to version 2.x and later sensors only
• The users' ability to disable protection cannot be removed from 1.0.x sensors
• The "Allow user to disable protection" policy option is grayed out unless "Show Sensor UI: Detail message" is enabled