Moving a Computer to Local Approval Mode

When computer users need to install new software and Carbon Black App Control trusted-approval methods (directory, user/group, publisher and updater) are inappropriate, you can temporarily put the user’s computer into Local Approval mode, which is a special policy that permits software installation.

Executable files introduced to a computer while it is in Local Approval mode become locally approved on that computer unless already banned. Files already on the computer before you enabled Local Approval mode are not locally approved, although there are other methods to approve them.

You move a computer to Local Approval mode either by checking the box next to its name on the Computers page and choosing Move to Local Approval on the Action menu, or by choosing Local Approval on the Change Policy menu on the Computer Details page. See Moving Computers to Local Approval Mode for complete instructions.