How Change Control works in a managed environment

Prev Next

Change Control prevents unauthorized changes to critical system files, directories, and configurations while implementing new policies and compliance measures.

It tracks changes to files and registry keys in real time and it identifies who made changes to which files.

  1. A system user tries to change a file or registry on a managed system where Change Control and Trellix Agent are installed.

  2. The Change Control software recognizes the attempted change and uses the Trellix Agent to send a Change Control event to ePO - On-prem.

  3. Change Control analyzes the rules and policies enforced on the endpoint, and allows or blocks the change.

    Note

    The administrator manages these rules and policies through ePO - On-prem.

  4. Read protection or write protection is enforced, and the user’s change attempt is approved or denied.

  5. The Change Control database logs the file change attempt and local user information.

GUID-9EC4FEC8-834A-4949-B7FF-B5063722C0E8-low.png