ThreatLocker will notify you of possible Policy changes that have yet to take effect by creating a red "Click to Deploy Policies" button in the upper left-hand corner of the portal. This button <ins>must</ins> be selected for any Policy changes to apply.&nbsp;&nbsp;
<img src="https://cdn.livechat-static.com/api/file/kb/file/9686855/93b2e570e0-9343a2a39f25d9fd831a.png" alt="undefined" style="float:none;height: undefined;width: undefined"/>
Global Policies are the exception and will be covered below. 
<blockquote>Note: If you are in your initial Learning Mode, policies will automatically be deployed to the endpoints accorting to the Learning settings (e.g. computer group, entire organization). However, if a machine is locked down, meaning the PC is in Secured Mode, Policies will only be deployed once the "Click to Deploy Policies" button has been selected.</blockquote>
<h2>Global Policies</h2>
Anytime a change to a global Policy has been made, you will need to deploy Policies from the Organizations page. This method must be used for all Global Policy configurations in order for the changes to take effect.
<ul>
<li>Select the Organization you wish to deploy to.</li>
<li>Select the top checkbox to select all child organizations.</li>
<li>Select the Deploy Policies button at the top of this page.</li>
</ul>
<img src="https://cdn.livechat-static.com/api/file/kb/file/9686855/f1984eb508-e75733ab46494e4a0f54.png" alt="undefined" style="float:none;height: undefined;width: undefined"/>
For more information and a tutorial about Deploying Policies, please visit the ThreatLocker University Course, Deploying Policies.

ThreatLocker will notify you of possible Policy changes that have yet to take effect by creating a red "Click to Deploy Policies" button in the upper left-hand corner of the portal. This button must be selected for any Policy changes to apply.  
 
Global Policies are the exception and will be covered below. 
Note: If you are in your initial Learning Mode, policies will automatically be deployed to the endpoints accorting to the Learning settings (e.g. computer group, entire organization). However, if a machine is locked down, meaning the PC is in Secured Mode, Policies will only be deployed once the "Click to Deploy Policies" button has been selected.
Global Policies
Anytime a change to a global Policy has been made, you will need to deploy Policies from the Organizations page. This method must be used for all Global Policy configurations in order for the changes to take effect.
Select the Organization you wish to deploy to.
Select the top checkbox to select all child organizations.
Select the Deploy Policies button at the top of this page.
 
For more information and a tutorial about Deploying Policies, please visit the ThreatLocker University Course, Deploying Policies.

Deploying Policies

Preventing the Exploitation of 3CX 

Preventing the Exploitation of CVE-2023-23397

Microsoft Peer-to-Peer Updates

Upcoming Scheduled Maintenance: February 11-12, 2023

ThreatLocker Endpoint Security Quality Guarantee

Eaglesoft and ThreatLocker Computers Not Checking In

Preventing the Exploitation of CVE-2022-30190 (Follina)

Applying Policies to Users or Active Directory Groups

Blocking and Permitting USB Drives

Changes to Adobe 6/8/2021 

Computer failing to update

Configuring with DUO Authentication

Create a Computer Group that does not learn

Creating a New Administrator

Default Computer Group Policies

Diagnosing an Application with an issue

Email Parsing Rules in ConnectWise Manage

Event Log Error Key

Excluded Processes

Getting your Unique Identifier from ThreatLocker

Hermetic Wiper: ThreatLocker Recommended Policy

Issue with RMM Deployment

Log4J Vulnerability

Managing Application Definitions

Managing Application Policies

Merging Application Definitions

Notifications for Requests

Permitting All Signed Files in a Directory

Permitting Blocked Files

Permitting Software from the Approval Center

Permitting Software From the Computers Page

Preventing BCDEdit From Being Weaponized

Preventing Bitlocker from being Weaponized

Remote Presence

Response to Reports of Webroot Compromised File

Restarting the ThreatLocker Agent

Setting the ThreatLocker Agent Update Channel 

Setting Up SMS Alerts for ThreatLocker Requests

Setting up the Active Directory Sync Service

ThreatLocker Application Control Agent Data Collection

ThreatLocker Override Codes

ThreatLocker Popup is not happening when something is blocked

ThreatLocker Portal Performance 

ThreatLocker Stub Installer

Trusting an Application by a Certificate

Uninstalling the ThreatLocker Agent

Updating the ThreatLocker Version on a Single Computer

Updating ThreatLocker to the Latest Version

User Permissions 

Using Learning Mode to Track Installed Files from an RMM or Software Deployment Tool

Using the Console App to Verify the ThreatLocker MAC Agent is Running

Using the ThreatLocker Unified Audit

Using ThreatLocker to Mitigate CVE-2021-40444

Why is an application that matches a built-in application being blocked?

Windows 11 Upgrade and ThreatLocker 

ThreatLocker Security and Privacy

Trial Expiry

The ThreatLocker Testing Environment

Allowing ThreatLockerService to Retrieve your AD Groups

Customer Deal Registration

ThreatLocker Mitigation and GoAnywhereMFT Zero-Day Exploit

Preventing the Exploitation of CVE-2023-2033

Rubber Ducky Data Exfiltration | Google Bucket

Preventing the Exploitation of MOVEit Vulnerability (CVE-2023-34362)

Proxy Benefits and Dangers

Changes to Elevation in ThreatLocker Version 8.2

Browser Extensions Affecting the ThreatLocker Testing Environment

Retrieving Your Computer ID

ThreatLocker Agent Tray

Protecting Fileservers While Allowing Remote Machines to Access Shared Files



Browser Extensions Affecting ThreatLocker Portal Performance

How to Use .NET Regex Within ThreatLocker

SSL Inspection

General

Search our Knowledge Base