Creating Policies
This section shows you how to create policies without using the Application Control Wizard. We recommend using the Application Control Wizard to create policies and to associate actions, filters, and target computers. See Application Control Wizard
(page 30).
To create an Application Control Solution policy
- In the Altiris Console, click the Tasks tab.
- In the left pane, select Tasks > Security Management > Windows >
Application Control Tasks > Security Policies. - In the left pane, right-click Security Policies and select New > Application Control Policy.
Target Computers
- In the right pane, click Enable.
- Enter a policy name and description in the fields provided.
- To select computers this policy applies to, click the Computers:
Configure Filters
- To include filters in the policy, click the Include: .
- In the Items Selector dialog, select an application filter.
To add your own application filter:- In the Items Selector dialog, click ?, and select a filter type.
- Depending on your selection:
- In the Collection Summary dialog, enter a name and description for the action, or
- In the Dynamic Filter dialog, configure the filter as required.
For details on what you can configure for each filter, see Application Filters
(page 24).
- To exclude filters in the policy, click the Exclude: and follow the procedure in Step 2 above.
- In the Collection Selector dialog, select a collection, and click Apply.
Configure Application Actions
- In the Policy Priority field, enter a policy priority to determine its order in relation to other policies.
- (Optional) To continue enforcing lower priority policies after enforcing this policy, select the corresponding check box.
- (Optional) To continue enforcing lower priority policies for child processes after enforcing this policy, select the corresponding check box.
Note
We recommend using the Application Control Wizard to create policies and to associate actions, filters, and target computers. See Creating an Application Control Policy.