The Process Rights action folder contains the actions to remove or add administrator rights. You can remove administrator rights for applications such as web browsers to increase their locked down state for both administrators and standard users.
The available Process Rights actions are as follows:
- Add Administrative Rights - This action adds the basic administrator rights needed to install and run an application with administrator rights.
- Add Administrative Rights - Unrestricted - This action adds administrator rights at a higher integrity level. Adding administrator rights (unrestricted) is usually only needed if an application or installer needs to create a global object, such as a service, or if system changes require unrestricted administrator rights.
- Remove Administrative Rights - This action removes administrative rights.
- Remove Advanced Privileges Action
To Create a New Action to Adjust Process Rights
- From the Arellia Security Manager console, go to the Policies tab.
- Navigate to Policies / Arellia Solutions / Application Control / Actions.
- Right-click Process Rights select New / Adjust Process Rights.
- From the Create Item window, you can name and describe the New Adjust Process Rights Action. Click OK.
- Configure the New Adjust Process Rights Action under Settings and select Save.
- The New Adjust Process Rights Action appears in the list of Actions under Process Rights.
