Carbon Black Cloud: Unable to start KnowBe4 Active Directory Integration Sync Service when sensor enabled

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

When attempting to start the service it displays

"Error 1067: The process terminated unexpectedly"

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Windows Sensor: All Supported Versions
• Microsoft Windows: All Supported Versions

Resolution

This issue is resolved with the followinig permission rule

Application at path: C:\program files (x86)\knowbe4\adisync\adisync.exe
Performs any API operation
Bypass