Removing Trust from a User or Group

If you no longer want a user or group to have installation privileges on locked-down computers, you can remove that user or group from the Trusted Users or Groups table.

Click the Delete (X) button next to the entry for that user or group.

Caution:

• If you eliminate Carbon Black App Control trust from a user or group, that user or group loses its trusted status as soon as agents receive the change. This means the user is not trusted to perform new installations. However, a process that was created when the user was trusted remains trusted until the process exits.
• If you remove a user from an AD group that is trusted by Carbon Black App Control, the user continues to be trusted until they log out.
• When a trusted user logs off, sessions the user initiated might be cached by the operating system. When that user logs in again, trust privileges could continue even after being disabled through the console. It might be necessary to reboot a system to remove user trust from all processes.