The following diagram illustrates everything that happens within the Application Control Solution (ACS) lifecycle.
File Inventory
After you install ACS, you must install the File Inventory Agent on managed computers. The File Inventory Agent obtains a list of files discovered on the managed computers. The File Inventory Agent uses two policies to obtain inventory:
- Default File Discovery Policy - creates an inventory of applications that are installed on the managed computer.
- Default File Inventory Policy - collects information about specific applications, such as Win32 Executable and Digital Certificate information.
Application Control Policies
You create Application Control policies to apply security policies to applications on managed computers. The policies you create determine how an application runs and is used. Each policy has actions and filters associated with it. (For more information about how to create Application Control policies, go to Policies, Actions and Filters.)
...