Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

To include a Process Security Descriptor action in an Application Control policy, you must create a security descriptor and a process security action.

Create a

...

security descriptor

The Security Descriptor defines who has what rights to the process that is started. As shown in the following screenshot, you can create a new Process Security Descriptor by clicking Security Descriptors - User Defined.

Image RemovedImage Added

 

Then define what rights each user or group has to the process, as shown in the following screenshot.

...

For detailed instructions about how to create a security descriptor, go to Security Descriptorsdescriptors.

Create a

...

process security action

A Process Security Descriptor action applies restrictions to the process. To create a Process Security Descriptor a process security descriptor action, do the following steps:

  1. In the Policies tab of the Security Manager Console, right-click the Process Security folder.
  2. Click New > Set Process Security Descriptor Action.
    Image RemovedImage Added
  3. Create a name for the new Process Security Descriptor Action.
  4. Click the Select... link.
    Image RemovedImage Added 
  5. Click the Security Descriptor that you want to attach the new action to.
    Image RemovedImage Added
  6. Click Save

The new action appears in the list of actions available in the Process Security folder. It is now available to include in an Application Control policy. For details about creating an Application Control policy, go to [EDITING] Create Application Control Policies.

...

Policies