Which Files Are Locally Approved On Transition

There are two types of locally Unapproved files, and these have different Local State Details.

• Files with Local State Details of Unapproved were discovered on a system in None (Visibility) or Low enforcement. They are locally approved by a change to Medium or High Enforcement Level.

• Files with Local State Details of Unapproved (Persisted) were discovered on a system in Medium or High enforcement. They remain Unapproved on transition.

You can view Local State Details on the Files page or Find File results (for multiple files) or the File Instance Details page (for one file). In any of the tables, add the Local State Details column if it is not shown.

For a single policy, the Related Views menu on the Edit Policy page includes an Unapproved files from computers in this policy link that opens the Find Files page with the results of a file search for these files. Viewing this list can be useful before taking actions that affect local approval of unapproved files.