Post-installation Activities

After you have installed the Carbon Black App Control agent on endpoints and initialization is complete, there are many ways to monitor and manage your endpoints.

• Viewing Endpoint Details – Carbon Black App Control server keeps details about each endpoint running a Carbon Black App Control agent, including the endpoint’s IP address, whether it is currently connected to the server, the policy, mode and Enforcement Level it is assigned, computer model and system details, and its connection history. See "Viewing the Table of Computers" in the Carbon Black App Control User Guide.
• Viewing Endpoint-related Events – You can monitor events related to a specific endpoint. See "Event Reports" in the Carbon Black App Control User Guide.
• Changing Policy – You can change the security policy assigned to an endpoint if necessary. See "Moving Computers to Another Policy" and "Restoring Computers from the Default Policy" in the Carbon Black App Control User Guide.
• Creating Clones – If you plan to use an endpoint as the template for cloning other endpoints, see "Managing Virtual Machines" in the Carbon Black App Control User Guide.
• Locally Approving Files – You can temporarily put an endpoint into Local Approval mode so that files with a global state of Unapproved on the Carbon Black App Control server can be installed locally and locally approved on this endpoint. See "Moving a Computer to Local Approval Mode" in the Carbon Black App Control User Guide.
• Viewing Details of Connected Devices – You can track and manage fixed and removable storage devices on agent-managed endpoints that are running Windows or macOS. See "Viewing Devices on Computers" in the Carbon Black App Control User Guide for more details.
• Saving a Snapshot – After agent installation and initialization is complete, you can instruct the Carbon Black App Control server to save a named snapshot of all files (by hash) on this endpoint currently inventoried by your server. This provides a reference point for analyzing changes in file inventory for that endpoint, other endpoints, or your whole network. See "Creating and Modifying Snapshots" in the Carbon Black App Control User Guide for more details.
• Deleting Computers – If an endpoint is going to be removed from your network or from Carbon Black App Control control, you can uninstall the agent and remove the endpoint from the table of computers on the server. This requires a specific series of actions detailed in "Deleting Computers" in the Carbon Black App Control User Guide.