What is the impact of disabling "Use Windows Security Center" in the policy?
book
Article ID: 292458
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
What is the impact of disabling "Use Windows Security Center" in the policy?
Environment
- Endpoint Standard (was CB Defense)
- Carbon Black Cloud Windows Sensor: 2.1.0.11 and Higher
- Microsoft Windows: Windows 7 and later
Resolution
- If "Use Windows Security Center" is enabled, then Carbon Black Cloud is listed as the antivirus provider on the device.
- If "Use Windows Security Center" is disabled, then Carbon Black Cloud is NOT listed as the antivirus provider on the device.
- Typically if Carbon Black Cloud is listed as the antivirus provider Windows will turn off Windows Defender
Additional Information
- Windows Security Center (WSC) requires Windows devices to have an antivirus provider.
- The Carbon Black Cloud is a Microsoft-certified antivirus provider for WSC.
- The "Use Windows Security Center" option is enabled by default in the default (Standard) policy group.
- You can disable WSC integration at any time; Doing so does not disable sensor protection
- Endpoint Standard orgs provisioned before July 2017 will need to enable WSC in policy sensor settings.
Feedback
thumb_up
Yes
thumb_down
No