Feature Override Settings

Please Note: Disabling features can leave your environment in an unsecure state. It is recommend to disable features only under the advice of a Cyber Hero, and only for as short a time as possible.

For troubleshooting purposes, it may sometimes be necessary to temporarily disable specific features in ThreatLocker. 

Navigate to the Advanced Settings page. In the legacy navigation menu, this is located in the left-hand menu. In the new navigation, the Advanced Settings button is located in the upper right-hand side of the portal header.

 Select the 'New Setting' button in the top left corner.

In the 'Setting Type' dropdown, select Feature Override Settings.

In the 'Applies To' dropdown, select the level at which you need to disable a feature.

Select if you want to add this setting to the top of the list or the bottom of the list.

In the 'Parameters' section, you will find the following override options:

• Override Elevation Control - Toggle the switch on to disable Elevation Control. No Elevation policies will take effect, users will be unable to request elevation, and local admins will not be enumerated or removed from the impacted 'Applies To'.
• Override Cyber Hero Approvals - Toggle the switch on to disable Cyber Hero Approvals.  Approval Requests from the impacted 'Applies To' will not go to the Cyber Hero Team, and will be your responsibility.
• Override Cyber Hero Managed Detection & Response - Toggle the switch on to disable Cyber Hero Managed Detection and Response.  Detect alerts from the impacted 'Applies To' will not go to the Cyber Hero Team, and will be your responsibility. 
• Override Cyber Hero Managed Identity Threat Detection & Response -  Toggle the switch on to disable Cyber Hero Managed Identity Threat Detection and Response.  ITDR alerts from the impacted 'Applies To' will not go to the Cyber Hero Team, and will be your responsibility. 
• Override Zero Trust Allowlisting -  Toggle the switch on to disable allowlisting. No file executions will be monitored or controlled while this is disabled.
• Override Storage Control -  Toggle the switch on to disable storage monitoring. No file reads, writes, moves, or deletes from the impacted 'Applies To'  will be monitored or controlled while this is disabled.
• Override Zero Trust Network Access - Toggle the switch on to disable network monitoring. No network activity will be monitored or controlled for the impacted 'Applies To'.
• Override Website Filtering -  Toggle the switch on to disable website monitoring. No website access will be monitored or controlled from the impacted 'Applies To'.

Once the desired feature override has been enabled, remember to press the 'Create' button to save the Advanced Setting and press the 'Update Agents' button to send the setting down to the agents.