App Control: How to Force Agents to Update Active Directory Mapped Policies

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

How to force agents to update their policy to match the Active Directory mapped policies

Environment

• App Control Server: All Version Supported
• Microsoft Windows Server: All Supported Versions

Resolution

Clear the server cache to update the Active Directory information.

1. Navigate to the Policies page
2. Select the Mappings Tab
3. Click Clear Server Cache in the Actions menu

Additional Information

• The Active Directory information used to map agent computers to policies is cached on the App Control Server and updated every four hours. It is also updated whenever a App Control rule change occurs that is related to AD mapping. 
• If changes are made to Active Directory information on your AD server – for example, changing the group a computer or user is in, renaming the computer, or adding a computer – this information normally does not become available to the CB Protection Server until the next scheduled cache upgrade.
• If  changes have been made or there are incorrect policy mappings, clearing the server cache will immediately begin updating AD information.