Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

You can update affected computers by running a task via the Arellia Security Thycotic Security Manager Console, or by manually restarting the affected computer(s).

...

If you're still able to log into the affected computer, then you can run a task from the Thycotic Security Manager Console to update the computer by doing the following steps:

...

  1. Restart the affected computer(s) in safe mode. (For details about starting in safe mode, go to Start your computer in safe mode.)
  2. In the Control Panel open Administrator Tools > Services
  3. Right-click Arellia Application Thycotic Application Control and click Properties
  4. Change the Startup Type to Disabled 
  5. Click OK
  6. Restart the computer. 

  7. Go to the Control Panel again and open Administrator Tools > Services.
  8. Change the Arellia Thycotic Application Control Startup Type to Automatic

More information on how to configure blacklisting policies

Additional

...

info

A manually created blacklisting or deny execute policy that has no application targets will apply to all programs and services and prevent them from running on an end-user's machine. If a new deny execute policy is created and enabled with out limiting the application target scope of the policy or is not being used with a proper whitelist, the bad blacklist policy will get rolled out and begin denying execution of all applications. This includes userinit.exe which will prevent users from logging in after a reboot. Those computers will act as if they are frozen because no new processes can get created.

...

Blacklisting best practices