Managing the Domain Controller Logon Scripts Rapid Config

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Steps to enable and configure the Rapid Config for Domain Controller Logon Scripts.

Environment

• App Control Agent: All Supported Versions
• App Control Console: All Supported Versions
• Microsoft Windows: All Supported Versions

Resolution

1. Log in to the Console and navigate to Rules > Software Rules > Rapid Configs.
2. Click View Details (pencil icon) for Domain Controller Logon Scripts.
3. Change the Status to Enabled.
4. Fill in the required fields
   • Allow And Optionally Promote: Choose accordingly
     • Allow: The scripts need only to execute.
     • Allow and Promote: The scripts need to execute, and also write/install additional files that need to be executed.
   • Domain Name:
     • Use ONLY NetBIOS name, do not include DNS Suffix.
     • The nbstat command can be used to confirm the NetBIOS name.

       Example:
       NetBIOS: AcmeAcct
       

   • First Domain Controller Name: The use of Wildcards is supported.

     Example:
     AcmeAcct-01
     AcmeAcct-02
     AcmeAcct-0?

5. Click Save & Exit.