You can remove local approval on a file that has been locally approved.

You might remove local file approval if a file you did not want approved was on a computer at Carbon Black App Control Agent initialization, or if you mistakenly approved the file by using one of the post-initialization methods. Locate the file and then use one of the following methods to remove approval:

  • In a file table (Files page, Find Files page, Baseline Drift Report Results), select the check box next to each file whose local approval you want to remove and select Remove Local Approval on the Action menu.
  • On a File Instance Details page, click the Remove Local Approval link.