App Control: Medium Enforcement Has Notifier Timeout, Delayed Notifier, and Unexpected Blocks

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• Unexpected Blocks while in Medium enforcement
• Applications not launching when "run as admin" selected
• Delayed Notifier popup
• Events in console with subtype "Execution block (prompt timeout)
• Windows Event Viewer (System) logs show error "Cannot change to default directory "C:\ProgramData\Bit9\Parity"Agent\images"

Environment

• App Control (Formerly CB Protection) Agent: 8.x
• Microsoft Windows: All Supported Versions

Cause

The agent is trying to display the notifier in a non-interactive session and times out.

Resolution

Upgrade to 8.1 P2 or above - this behavior has been corrected.

Additional Information

This was resolved via EP-3481