Carbon Black Cloud: Can You Prevent the Sensor from being Uninstalled?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Can a Carbon Black Cloud administrator prevent endpoint users from uninstalling the Windows or macOS Sensor?  

Environment

• Carbon Black Cloud Sensor: 3.x and Higher
• Microsoft Windows: All Supported Versions
• Apple macOS: All Supported Versions

Resolution

Yes, this functionality exists within the Windows and macOS Sensors. To enable it:

1. Create or modify a Sensor Group Policy (Enforce Menu > Policies)
2. Click on the Sensors sub-tab.
3. Enable (check) the 'Require code to uninstall sensor' option. 
4. Save the updated policy.
5. Assign the policy to the sensor group you would like to have this functionality.

Additional Information

• The uninstall code can be found under the Inventory menu > Endpoints.  Click on the ' > ' icon beside the endpoint to see the uninstall code.