What is the impact of disabling "Use Windows Security Center" in the policy?
search cancel

What is the impact of disabling "Use Windows Security Center" in the policy?

book

Article ID: 292458

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense) Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

What is the impact of disabling "Use Windows Security Center" in the policy?

Environment

  • Endpoint Standard (was CB Defense)
  • Carbon Black Cloud Windows Sensor: 2.1.0.11 and Higher
  • Microsoft Windows: Windows 7 and later

Resolution

  • If "Use Windows Security Center" is enabled, then Carbon Black Cloud is listed as the antivirus provider on the device.
  • If "Use Windows Security Center" is disabled, then Carbon Black Cloud is NOT listed as the antivirus provider on the device.
  • Typically if Carbon Black Cloud is listed as the antivirus provider Windows will turn off Windows Defender

Additional Information

  • Windows Security Center (WSC) requires Windows devices to have an antivirus provider.
  • The Carbon Black Cloud is a Microsoft-certified antivirus provider for WSC.
  • The "Use Windows Security Center" option is enabled by default in the default (Standard) policy group.
  • You can disable WSC integration at any time; Doing so does not disable sensor protection
  • Endpoint Standard orgs provisioned before July 2017 will need to enable WSC in policy sensor settings.