The AD information that is used to map agent computers to policies is cached on the App Control Server and updated every four hours. It is also updated whenever an Carbon Black App Control rule change occurs that is related to AD mapping.

If you make a change to this AD information on your AD server – for example, changing the group a computer or user is in, or adding a computer – this information normally does not become available to the Carbon Black App Control Server until the next scheduled cache upgrade. If you know you have made relevant changes or you see incorrect policy mapping, you can clear the server cache so that the Carbon Black App Control Server immediately begins updating AD information.

To clear the server cache and update AD information:

On the Mappings tab of the Policies page, click Clear Server Cache in the Actions menu.