App Control: How to Apply the Registry Fix Included with the Rules Installer v1.16

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

How to Apply the Registry Fix Included with Rules Installer v1.16

Environment

App Control Server: All Supported Versions
App Control Rules Installer: 1.16

Resolution

Steps to apply the fix:

1. Download the "CleanDeleteFlags.zip" file from the following KB
2. Extract the Zip and move the "CleanDeleteFlags.txt" onto the App Control server system
3. Rename the file to: "CleanDeleteFlags.reg"
4. If there is an agent on the App Control Server system please:
   • Approve the file "CleanDeleteFlags.reg", so it doesn't get blocked
   • Disable the agent's Tamper Protection in the web console > Assets > Computers > Computer Details page > Disable Tamper Protection
5. Double-click the "CleanDeleteFlags.reg" and apply the registry fix

Alternatively, manually remove the delete flag registry values if they exist:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ParityServer\DeleteFlag
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ParityReporter\DeleteFlag

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ParityServer\DeleteFlag
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ParityReporter\DeleteFlag

Additional Information

For more information on what the Registry Fix Included with Rules Installer v1.16 is, please check this KB