I want to create a pop-up notification if computer gets isolated

[jakacm]

Our organization would like to create a pop-up notification on an end user's device that informs them that their computer has been isolated and they need to contact IT services.

My question, is there a specific registry key or a file that gets created by AMP/Secure Client that will allow us to create a script that will run if this key is turned "on" or if a specific file is created?

Thank-you for any assistance!

[Matthew Franks]

When you isolate an endpoint a file is created for the isolation allow list.
"C:/Program Files/Cisco/AMP/endpointisolation/endpointisolationallowlist.xml"

When you stop the isolation, that file is removed. So, you can check to see if the file exists with your script and then create your pop up if it does. Hope that helps!

Thanks,

Matt

[jakacm]

Thankyou so much! I will give this a try!