App Control: How to Determine Agent Enforcement Level Via CMD or Registry

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

To gather an Agent's enforcement level via command line (CMD) or checking the registry

Environment

• App Control (Formerly CB Protection) Agent: All Supported Versions
• Microsoft Windows: All Supported Versions

Resolution

CMD:

1. Run command:

   "c:\Program Files (x86)\Bit9\Parity Agent\DasCLI.exe" status | Findstr Current

Registry:

1. Open regedit
2. Navigate to the location that correlates to the Agent installed:
   • 32-bit endpoints: HKEY_LOCAL_MACHINE > Software > Bit9 > Parity Agent > ServerSettings
   • 64-bit endpoints: HKEY_LOCAL_MACHINE > Software > Wow6432Node > Bit9 > Parity Agent > ServerSettings
3. The possible values of B9_HOST_ENFORCEMENT are:

20	High Enforcement
30	Medium Enforcement
35	Approval
40	Low Enforcement
60	Visibility
80	Disabled