Override Code Management

Managed Override Codes can be created but can only be used on endpoints running Windows Agent 11.0+ or Mac Agent 11.1+. Default Override Codes are supported on all agent versions.

Overview

The Override Code Management window allows administrators to view, search, create, and delete override codes.

From this window, administrators can:

• Create a new override code
• View existing override codes
• Search override codes
• Delete override codes that are no longer needed

Accessing Override Code Management

1. Navigate to Computers Page, and open the Computer Options menu.
2. Select Override Code Management

The window displays a table of existing override codes for the organization.

Creating a New Override Code

To create a new override code:

1. Select the + New Override Code button.
2. In the New Override Code window, select an option from the Applies To dropdown.
3. Enter a value in Usage Limit Time (Minutes), or select No Time Limit.
4. Select Create.

Viewing an Override Code

Override codes are masked by default for security.

To view an override code:

1. Locate the computer or group in the table.
2. Select Click to View next to the masked override code.

Alternatively:

1. Locate computer on the Computers page.
2. Open the computer sidebar.
3. Inside of the Computer Information section, locate Override Code at the bottom of the section.
4. Select Click to View  to see the override code.

Searching Override Codes

Use the Search field to locate a specific override code entry.

The search can be used to find records based on visible table information, such as the value listed in the Applies To column or the user listed in the Created By column.

Including Child Organizations

The Include Child Organizations checkbox allows administrators to include override codes from child organizations in the results.

Showing Only Customer Managed Records

The Only Show Customer Managed checkbox filters the table to show only override codes that are customer managed.

Deleting an Override Code

To delete an override code:

1. Locate the override code in the table.
2. Select the delete icon in the Delete column.
3. Confirm the deletion.

Please Note: The Default Override Codes (the daily codes created by ThreatLocker) cannot be deleted.

Required Permissions 

• Super Admin - contains both the Manage and View Override Codes permissions

Or one or both of the following:

• Manage Override Codes — This permission is required to create or delete override codes through the Override Code Management window.

• View Override Codes — This permission is required to view the override codes through the computer sidebar or the Override Code Management window.