Tray Settings - Configurable Notification Timeout

Note: Requires ThreatLocker Windows Agent Version 10.6.2 or greater.

The ThreatLocker agent has several instances in which it will submit a pop-up on a user's machine. These pop-ups can occur for many different reasons, such as allowing a user to request an application, request elevation, notifying a user that their application was approved or rejected, or requesting a restart of the user's machine. ThreatLocker is set to make these notifications timeout after a specific period; however, a new Agent Setting called 'Tray Settings - Configurable Notification Timeout' allows you to customize the time a notification will remain on-screen before disappearing. The following are all time periods that can be applied to each notification:

20 seconds
40 seconds
1 minute
2 minutes
5 minutes
10 minutes
15 minutes
30 minutes
45 minutes
1 hour
2 hours
3 hours
4 hours
5 hours
6 hours
7 hours
8 hours
9 hours
10 hours

To enable this Agent Setting, select the 'Tray Settings - Configurable Notification Timeout' Setting Type from the 'Create Settings' side panel.

Once selected, the 'Parameters' section will populate with a list of different notification types that can be modified. The default parameters appearing here are the default time period these notifications will remain before disappearing. The following list will explain what each parameter applies to, as well as the default period of time that these notifications remain:

Action Alert - These notifications appear when an application is blocked, allowing users to request access. By default, they will display on a user's machine for 20 seconds.
Action Alert Elevate - These notifications appear when a user requests administrative privileges for an application. By default, they will display on a user's machine for 20 seconds.

Note: To receive this elevation notification, users must have the UseWindowsUAC Option applied in their organization, which generates a separate alert from the Windows UAC pop-up. Without this Option, you will not receive the notification that this setting applies to.

Push Notification Application Approval - These notifications appear when an admin in your organization or a ThreatLocker Cyber Hero approves or rejects a request to use an application. By default, they will display on a user's machine for 2 minutes.
Push Notification Storage Approval - These notifications appear when an admin in your organization approves or rejects a storage request. By default, they will display on a user's machine for 2 minutes.
Push Notification Elevation Approval - These notifications appear when an admin in your organization approves or rejects an elevation request. By default, they will display on a user's machine for 20 seconds.
Push Notification Custom - Custom push notifications can be created via Computer Group. This will affect the length of time that a custom push notification displays on a user's machine. By default, these custom push notifications remain on a user's machine for 20 seconds.
Push Notification Web Control - These notifications appear when an admin in your organization or a ThreatLocker Cyber Hero approves or rejects a request to access a website. By default, they will display on a user's machine for 20 seconds.
Push Notification Detect - This notification appears as a QR code. It is sent from the Cyber Hero MDR team after an alert has been generated, allowing admins to put their machine into a temporary maintenance mode if the actions they are performing on their computer might create many alerts. By default, these notifications will remain on a user's machine for 2 minutes.
Request Restart - Users can receive a notification that alerts them that their machine needs to be restarted. This notification includes a button that allows users to restart their machine. By default, these notifications will remain on a user's machine for 20 seconds.

Once you have filled out your parameters, navigate to the bottom of the 'Create Settings' side panel. Select the 'Create' button at the bottom of the page to create the setting.

Select the 'Update Agents' button at the top of the page to push this new setting to all applicable agents.