Creating an Application Control Policy

Application Control policies determine whether or not certain actions are run before an end user can run an application. Example: A policy may deny application execution or quarantine the application when a user attempts to run the application. The easiest way to create these policies is to use the Application Control Wizard.

To create an Application Control policy

...

1. In the Altiris Console, click the Tasks tab.

...

1. In the left pane, select Tasks > Security Management > Application Control >Windows >

...

1. Application Control Tasks > Manage Applications.

...

1. In the right pane, click   Image Modified

...

1. In the pop-up menu, select the policy you want from:

   ...

   1. 1. Automate Document Encryption

   ...

   1. 1. Blank Application Control Policy

   ...

   1. 1. Deny Application Execution

   ...

   1. 1. Elevate Process Rights

   ...

   1. 1. Prevent Windows Hooking
         *     Quarantine Application
         *     Restrict Application Read and Write File Access
         *     Restrict Process Rights
         *     Run an Application in Read-Only Mode
         *     Run an Application in an SVS Layer

   Note - For descriptions of these Application Control policies, see Overview .

   ...

   In this step, you select actions to apply to an application and its processes. You can also select application action reporting options.
   1.   To add an action to the policy, under Select an action to apply to the application, click Select an Item.
   2.   In the Items Selector dialog, select an application action.
   To add your own application action:
   a.   In the Items Selector dialog, click Image Removed!NewButton.jpg!  and select an action.
   b.   In the Application Action dialog, enter a name and description for the action.
   For details on what you can configure for each action, see Application Actions
   (page 16).
   To add additional actions, see (Optional) To Add extra Application Actions
   (page 13).
   3.   To add an action to any Child Process select:
   *     Same as Above - Apply the application action to any child process.
   Altiris Application Control Solution Help    12
   *     Use Different Action - Click Select an Item, select an application in the
   Items Selector Dialog, and click Apply.
   4.   (Optional) Click Send the Notification Server an event if these actions are applied.
   5.   Click Next.
   (Optional) To Add extra Application Actions
   You can add as many application actions to a policy as you want:
   1.   When you select an application action in the Item Selector dialog as shown in Step 2
   - Select Actions (page 12), click  , and select a new action.
   2.   In the Item Selector dialog, click , select the action you just added, and click
   Apply.
   Your policy now contains two application actions.
   Step 3 - Policy Details
   Enter general policy details and enforcement options.
   1.   Click Enable.
   2.   Enter a policy name and description in the fields provided.
   3.   Select your policy enforcement options:
   *     Policy Priority - Enter a policy priority to determine its order in relation to other policies.
   *     To continue enforcing lower priority policies after enforcing this policy, click the appropriate check box.
   *     To continue enforcing lower priority policies for child processes after enforcing this policy, select the appropriate check box.
   4.   Click Finish.