Register Restrictions

The Register Restrictions Advanced Setting allows you to restrict ThreatLocker Agent registrations based on IP address. This helps ensure that only devices registering from approved IP addresses can be added to your organization, reducing the risk of unauthorized or incorrectly registered devices.

This setting is particularly useful for preventing devices from being accidentally registered to the wrong organization, such as a parent organization instead of a child organization.

Note: This Advanced Setting is available for Windows, macOS, and Linux agents and is not restricted to a specific ThreatLocker Agent version.

Configure the Register Restrictions Setting

• Navigate to the Advanced Settings page.
• Select + New Setting in the upper-left corner. This opens the Create Setting side panel.

• From the Setting Type dropdown, select Register Restrictions.

Ensure that you select the Entire Organization or computer group to which you would like this Advanced Setting to apply.

Once the Setting Type has been selected, the Parameters section will populate with a checkbox titled 'Enabled'. Selecting this checkbox will enable this Advanced Setting.

Once the 'Enabled' checkbox is selected, the following fields will appear in the area below:

1. IP Address - The IP address field should contain addresses that are permitted to be in your ThreatLocker organization. This field permits the use of IPv4, IPv6, and CIDR notation IP addresses.
2. Name - The name associated with the inserted IP address(es). This will act as an identifier.

Once you have filled in this information, select the 'Add' button to the right of the fields.

Selecting the 'Add' button will provide another field to enter more IP addresses. You will also see a new button titled 'Remove', which will allow you to remove any IP addresses that are no longer needed.

When you have completed adding all of your information, select the 'Create' button at the bottom of the side panel, then be sure to choose the 'Update Agents' button in the top left corner of the 'Advanced Settings' page.

When this setting is enabled, ThreatLocker will check the IP addresses of computers within your organization. If the computer matches an IP address listed in your 'Register Restrictions' Advanced Setting, the machine will continue to register as expected. However, if the machine does not match, the ThreatLocker Agent will fail to register it to the organization.