| Warning | ||
|---|---|---|
| ||
Creation in process |
| Info | ||
|---|---|---|
| ||
This feature was introduced in 7.1 SP3. |
Application Compatibility Filter
The Application Compatibility Filters contains the file inventory of executables that can be run on a managed computer. Each filter can be referenced by an Application Compatibility policy and determines the environment in which the application can be executed or be restricted on installation.
...
The application compatibility filter performs application compatibility tests as to whether a program is deemed to require specific security rights, or is an application setup.
| Note |
|---|
This feature only functions on Windows Vista, Windows 7, Windows 8, Windows 8.1, Windows Server 2008 and Windows Server 2012. |
Application compatibility filter
The application compatibility filters leverage Windows Application Compatibility to determine whether:
- An application has specific security requirements.
- An application is a setup program or not. Generic Installers refer to executables generated by Installation Software vendors such as InstallShield.
For more information on Windows Application Compatibility visit Technet.
To view the standard application compatibility filters, do the following steps:
- From the Arellia Security Manager Console, go to the Policies tab.
- Navigate to Policies / Arellia Solutions / Application Control / Filters / File Filters.
- To view the standard filters, select Application Compatibility.
...
Standard filters
Administrative Rights Required Application Compatibility Filter
...
--This filter tests whether Windows has detected that this executable requires administrative rights to be run.
To access Application Compatibility Filters:
...
Administrative Rights Required Detection Policy (Security Manifest)
This policy detects applications that contain a security manifest that specifies administrative rights are required. A security manifest file is the key file which contains the company and license information for a specific software product.
Setup Detection Policy
This policy detects applications that are setups. This allows the policy to control whether an application or program can be installed adding the required configuration data such as configuration files, Windows registry entries or environment variables a specialized program responsible for doing whatever is needed for their installation.
Generic Installer Detection Filter--This filter indicates that Windows has detected that an executable is an Application Setup.
Highest Available Application Compatibility Filter--This filter tests whether Windows has detected that this executable required highest available rights.
Specific Installer Detection Filter--This filter indicates that Windows has detected that an executable is an Application Setup.
Specific Non-Installer Detection Filter--This filter indicates that an executable has been flagged as not being an Application Setup.
To create a new Application Compatibility Filter, do the following steps:
- From File Filters, select Application Compatibility.
- Right-click and select New. The Create New Item Dialog appears.
- Click OK. The New Application Compatibility Filter window appears.
- Modify the filter name and attributes, and click Save.
