App Control: How To Enable and Configure Domain Controller Logon Scripts Rapid Config
search cancel

App Control: How To Enable and Configure Domain Controller Logon Scripts Rapid Config

book

Article ID: 288528

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

To enable and configure the Rapid Config for Domain Controller Logon Scripts.

Environment

  • App Control Agent: All Supported Versions
  • App Control Console: All Supported Versions
  • Microsoft Windows: All Supported Versions

Resolution

  1. Log in to the Console and navigate to Rules > Software Rules > Rapid Configs.
  2. Click View Details (pencil icon) for Domain Controller Logon Scripts.
  3. Change the Status to Enabled.
  4. Fill in the required fields
    • Allow And Optionally Promote: Choose accordingly
      • Allow: The scripts need only to execute.
      • Allow and Promote: The scripts need to execute, and also write/install additional files that need to be executed.
    • Domain Name: Use ONLY NetBIOS name, do not include DNS Suffix.
      Example:
      NetBIOS: AcmeAcct
      
    • First Domain Controller Name: Wildcards are supported.
      Example:
      AcmeAcct-01
      AcmeAcct-02
      AcmeAcct-0?
  5. Click Save & Exit.

Additional Information

  • How to use the nbstat command to confirm NetBIOS Name.
  • More information about using Wildcards can be found here.