There might be situations in which you want to disable notifiers for some or all of your agent computers.
For example, if you are running single-purpose devices in High Enforcement, you might simply want to block unauthorized actions without feedback. Block-only notifiers can be disabled without disabling the rules that can otherwise display them. You can disable notifiers on a per-setting basis in each policy. You also can disable notifiers for specific custom, memory, or registry rules.
You can disable notifiers only for block-only rules. Rules that prompt users for a response should always display a notifier.
Disabling Carbon Black App Control notifiers does not necessarily mean that actions are blocked silently. Some Carbon Black App Control blocks cause the display of operating system notifiers. Also, except for a Custom, Registry, or Memory rule that has Block Silently as its action, events continue to be recorded for blocks even though the notifier is disabled.
Disable Policy Notifiers
You can disable one or more notifications for the settings in a policy.
Procedure
Disable Notification for a Rule
You can disable one or more notifications for the settings in a specific Custom, Registry, or Memory rule.