Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. In the Security Manager Console, click the Policies tab.
  2. In the file library in the left pane, navigate to Policies > Arellia Solutions > Application Control > Filters > Dynamic Filters > EnvironmentalVariables. 
  3. Right-click Environment Variables and click New > Environment Filter.
  4. In the Create Item dialog, enter a Name and Description.



  5. Set the variable Name to __APPINFO_RUNADMIN and set the Value of 1.
  6. In the Match Type menu choose Partial.
  7. Click Save.



...

  1. In the file library in the left pane, navigate toNavigate to navigate to Policies > Arellia Solutions > Application Control > Policies. 
  2. Right-click Policies and click New > Blank Application Control Policy. 
     
  3. Set the application target to the new UAC detected filter from step 2
  4. In the right pane, click the Applications link and choose the new Environment Variable Filter. (Optionally you can change this so only certain applications or certain users will have see the UAC overridden UAC prompt overridden.)
  5. Under Exclude conditions add the Administrators filter to stop child processes (which inherit elevation) from triggering this policy
  6. Click on the Application Actions tab and set the action to the Clear UAC dialog action from step 6
  7. Also set the action to include one of the following:
  8. Add Administrator Rights, and Justify Application Elevation Dialog (will behave like [READY] Self-Elevation)
  9. Add Administrator Rights, and Justify Application Elevation (kill process) Dialog (will behave like [READY] Self-Elevation Without Adding Administrator Rights)
  10. Add Administrator Rights, and Approval Request Form Action (will behave like [READY] Request Elevation)
  11. Save the policy and update the policies on an endpoint. Test the policy by right-clicking Command Prompt and selecting Run as administrator
  12. Instead of seeing UAC, you should see the custom message
  13. The recorded response will then be sent to the Arellia Management Server where it can be reviewed by the help desk team.

...