Updating ThreatLocker to the Latest Version

4 min. readlast update: 06.25.2025

Table of Contents

Updating the ThreatLocker Agent on a Single Computer | Updating the ThreatLocker Agent by Computer Group | Updating Your Child Organizations' ThreatLocker Versions

Note: Before the version changes can take effect, the ThreatLocker Service will need to be restarted twice. The first restart pulls the download files manually, the second restart (after the next check in) applies the update. You can allow this to happen organically with a computer restart or you can force a service restart from the 'Devices' page. Please refer to the following article for how to restart your ThreatLocker Agent:

Restarting the ThreatLocker Agent | ThreatLocker Help Center

The ThreatLocker Agent version can be changed by computer group on the 'Computer Groups' page or by a single computer on the 'Devices' page. This article will cover each method of upgrading the ThreatLocker Agent within the portal.

Updating the ThreatLocker Agent on a Single Computer

You can update the ThreatLocker Version running on a single computer. This is helpful because it allows you to test out a newer version of ThreatLocker before updating your entire organization. 

Navigate to the Devices page. You will see a column entitled 'TL Version'. By default, the setting is 'Inherit From Group,' which means that the version is controlled by the computer group's settings. 

To change the ThreatLocker Version, select the current version found in the ‘TL Version’ column. 

 

Alternatively, you can select the checkbox to the left of the device name, then select ‘Upgrade Version’. 

 

When selecting devices to update, if you choose two devices with different Operating Systems, the following message will appear:

OS Type Mismatch Detected. Please check if selected computers are of similar OS Type.

If only one device or devices with the same OS are selected, you can choose the desired version from the dropdown menu. 

 

Select the ‘Change Version’ button when you have selected the version to upgrade to. 

 

Before the version changes can take effect, the ThreatLocker Service must be restarted twice. The first restart pulls the download files manually, while the second restart (after the next check-in) applies the update. You can allow this to happen organically with a computer restart or force a service restart from the Devices page. 

To restart the ThreatLocker Service, select the checkbox to the left of the machine on which you want to restart the agent and select ‘Restart Agent.’ 

A pop-up window titled ‘Restart Agent’ will show you all options for restarting the ThreatLocker Agent. 

 

Select ‘Selected Devices’ to restart the agent on only the selected machine or ‘All Devices’ to restart the agent for every device in your organization.

If you select the 'All Devices' button, a pop-up window titled 'Restart the Agent on ALL devices?'  will open. From here, selecting the 'Restart the Agent on all devices' button will restart the agent on devices shown in your organization.

Alternatively, you can select the hamburger icon on the top left corner of the ‘Devices’ page, then select ‘Restart Agent (ALL)’ to restart the ThreatLocker Agent on all machines. 

 

Updating the ThreatLocker Agent by Computer Group

The ThreatLocker Agent can be upgraded per group of computers; this is done from the 'Computer Groups' page.

To navigate to this page, select 'Devices' from the left-hand side of the portal.

Within the 'Devices' page, select the 'Groups' tab found in the top right corner of the page.

Now, select the group or groups on which you want to update the ThreatLocker Agent version by choosing the checkboxes to the left of the group name. Once all desired groups have been selected, a series of buttons will appear above the list of groups. Choose the 'Update ThreatLocker Version' button that will appear here.

Selecting this button will open a pop-up window titled 'Update ThreatLocker Version'. This window includes a dropdown menu to select which ThreatLocker version to update the computer groups.

You will also see the list of operating systems that ThreatLocker supports. The number to the left of each operating system icon indicates the number of selected groups that match that OS.

If groups with multiple operating systems are selected, the following message will display:

Only OS Types that can update to selected version will update.

Select the version number from the dropdown, then select the 'Update (#) Groups' button.

Alternatively, you can also select 'Update All'. Depending on your chosen version, groups with the specified OS type will update while others will remain the same. Once you select 'Update All', a pop-up will ask you to confirm your selection and inform you that only groups with the specified OS will be updated. Select 'Yes' to proceed.

Once selected, a pop-up will show you that your ThreatLocker version was updated on the specified machines.

Updating Your Child Organizations' ThreatLocker Versions

While updating either by individual computers or computer groups, you can select a checkbox to include Child Organizations. When selecting this checkbox, devices or computer groups from Child Organizations will appear, allowing you to include them in your updates.

Note: If you have the 'Include Child Organizations' checkbox selected and you choose to update all devices, devices or groups from the Child Organizations will be included.
Was this article helpful?