Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Creating Policies

Excerpt

This section shows you how to create policies without using the Application Control Wizard.

We recommend using the Application Control Wizard to create policies and to associate actions, filters, and target computers. See Application Control Wizard
(page 30).

To create an Application Control Solution policy1.

  1. In the Altiris Console, click the Tasks tab.

...

  1. In the left pane, select Tasks > Security Management > Windows >
    Application Control Tasks > Security Policies.

...

  1. In the left pane, right-click Security Policies and select New > Application

...

  1. Control Policy.

Target Computers

...

  1. In the right pane, click Enable.

...

  1. Enter a policy name and description in the fields provided.

...

  1. To select computers this policy applies to, click the Computers:

...

Configure Filters

...

  1. To include filters in the policy, click the Include: ?.

...

  1. In the Items Selector dialog, select an application filter.
    To add your own application filter:

      ...

        1. In the Items Selector dialog, click ? , and select a filter type.

      ...

        1. Depending on your selection:

        ...

            • In the Collection Summary dialog, enter a name and description for the action, or

        ...

            • In the Dynamic Filter dialog, configure the filter as required.

        Altiris Application Control Solution Help 44

            • For details on what you can configure for each filter, see Application Filters
              (page 24).

        ...

        1. To exclude filters in the policy, click the Exclude: ? and follow the procedure in

        ...

        1. Step 2 above.

        ...

        1. In the Collection Selector dialog, select a collection, and click Apply.

        Configure Application Actions

        ...

        1. In the Policy Priority field, enter a policy priority to determine its order in relation to other policies.

        ...

        1. (Optional) To continue enforcing lower priority policies after enforcing this policy, select the corresponding check box.

        ...

        1. (Optional) To continue enforcing lower priority policies for child processes after enforcing this policy, select the corresponding check box.

        Note
        We recommend using the Application Control Wizard to create policies and to associate actions, filters, and target computers. See Creating an Application Control Policy
        (page 11).