Tray Settings - Configurable Notification Timeout

4 min. readlast update: 07.01.2026

Note: This Advanced Setting requires ThreatLocker Windows Agent 10.6.2 or later.

The ThreatLocker agent displays notifications to users for a variety of events, including blocked application requests, elevation requests, application approvals or rejections, and restart prompts. By default, these notifications remain on screen for a predefined period before automatically closing.

The Tray Settings - Configurable Notification Timeout Advanced Setting allows you to customize how long these notifications remain visible before they disappear. This enables you to provide users with additional time to review and respond to notifications, if needed.

The following timeout values are available:

  • 20 seconds
  • 40 seconds
  • 1 minute
  • 2 minutes
  • 5 minutes
  • 10 minutes
  • 15 minutes
  • 30 minutes
  • 45 minutes
  • 1 hour
  • 2 hours
  • 3 hours
  • 4 hours
  • 5 hours
  • 6 hours
  • 7 hours
  • 8 hours
  • 9 hours
  • 10 hours

Configure the Tray Settings - Configurable Notification Timeout Setting

  • Navigate to the Advanced Settings page.
  • Select + New Setting in the upper-left corner. This opens the Create Setting side panel.

  • From the Setting Type dropdown, select Tray Settings - Configurable Notification Timeout.

Once selected, the 'Parameters' section will populate with a list of different notification types that can be modified. The default parameters appearing here are the default time period these notifications will remain before disappearing. The following list will explain what each parameter applies to, as well as the default period of time that these notifications remain:

  • Blocked Item Popup - These notifications appear when an application is blocked, allowing users to request access. By default, they will display on a user's machine for 20 seconds.
  • Blocked Elevation Popup - These notifications appear when a user requests administrative privileges for an application. By default, they will display on a user's machine for 20 seconds.

Note: To receive this elevation notification, users must have the UseWindowsUAC Option applied in their organization, which generates a separate alert from the Windows UAC pop-up. Without this Option, you will not receive the notification that this setting applies to.

  • Application Approved/Rejected Notification - These notifications appear when an admin in your organization or a ThreatLocker Cyber Hero approves or rejects a request to use an application. By default, they will display on a user's machine for 2 minutes.
  • Storage Request Approved/Rejected Notification - These notifications appear when an admin in your organization approves or rejects a storage request. By default, they will display on a user's machine for 2 minutes.
  • Elevation Request Response Notification - These notifications appear when an admin in your organization approves or rejects an elevation request. By default, they will display on a user's machine for 20 seconds.
  • Custom Notification (From Computer Group sidebar) - Custom push notifications can be created via Computer Group. This will affect the length of time that a custom push notification displays on a user's machine. By default, these custom push notifications remain on a user's machine for 20 seconds.
  • Web Control Request Approved/Rejected Notification - These notifications appear when an admin in your organization or a ThreatLocker Cyber Hero approves or rejects a request to access a website. By default, they will display on a user's machine for 20 seconds.
  • QR Code Popup sent by ThreatLocker MDR Team - This notification appears as a QR code. It is sent from the Cyber Hero MDR team after an alert has been generated, allowing admins to put their machine into a temporary maintenance mode if the actions they are performing on their computer might create many alerts. By default, these notifications will remain on a user's machine for 2 minutes.
  • Patch Management Computer Restart Notification - Users can receive a notification that alerts them that their machine needs to be restarted as part of Patch Management. This notification includes a button that allows users to restart their machine. By default, these notifications will remain on a user's machine for 20 seconds.

Once you have filled out your parameters, navigate to the bottom of the 'Create Settings' side panel. Select the 'Create' button at the bottom of the page to create the setting.

Select the 'Update Agents' button at the top of the page to push this new setting to all applicable agents.

Was this article helpful?