This article will cover the steps required to restart the ThreatLocker Agent on a computer.
Note: This is most commonly used to force the Agent to update to the latest version.
Restarting the ThreatLocker Agent
To restart the ThreatLocker Agent, you will first need to log into the ThreatLocker portal, then navigate to the ‘Devices’ page using the left-hand side of the portal.
Within the devices page, use the checkboxes to the left of the device names to select the machine or machines on which you would like to restart the ThreatLocker Agent.
Once this is selected, several actionable buttons will appear above the list of device names. Select the ‘Restart Agent’ button.
Selecting this button will open a pop-up window titled ‘Restart Agent’.
From here, you can select the button labeled ‘Selected Devices’ to restart the agent only on your selected devices.
Alternatively, you can select ‘All Devices’ to restart the agent on all devices within your organization.
Selecting the ‘All Devices’ button will open a new window titled ‘Restart the Agent on All devices?’ Select the ‘Restart the Agent on all devices’ button at the bottom to restart all agents.
Once this button has been selected, you will receive the following message:
Alternatively, you can restart the ThreatLocker Service on all machines in the managed organization by selecting the hamburger menu at the top of the page, then selecting ‘Restart Agent (ALL)’ from the menu.
All computers in the organization you are managing will have the ThreatLocker Service restarted without the need to select checkboxes next to the computers. If you also have the ‘Include Child Organizations’ checkbox selected, the ThreatLocker Service will also be restarted on all computers in all child organizations.
Once selected, you will receive the following message confirming the service restart has been initiated.
End users will NOT be impacted by restarting the ThreatLocker Service.
Note: Computers running a ThreatLocker agent version below 4.37.0.5 cannot be restarted using this method.