Run an application in a workspace virtualization layer

This document shows you how to capture application data in a Symantec Workspace Virtualization layer. 

In the following example, the end user has installed Symantec Workspace Virtualization and Microsoft Word.

To run an application in a Workspace Virtualization Layer, do the following steps:

  1. On the managed computer, create the Microsoft Word document C:\document\important document.doc.
  2. In the Thycotic Security Manager, click the Policies tab.
  3. In the file library in the left pane, navigate to the Application Control > Policies folder.
  4. Right-click the Policies folder and click New > Run Application in Workspace Virtualization Layer.
  5. Configure the policy details as follows.
  6. Enable the policy using the On/Off toggle.
  7. Name the policy "Run Microsoft Word in an SVS layer."
  8. In the Description field, type "Capture Microsoft Word data in an SVS layer."

     
     
  9. Select MS Word as the Include Filter.
  10. Click Save.
  11. Close and re-open Microsoft Word on an endpoint. Attempt to open the document created in step 1 (notice that Word can not see this document).
  12. Create a new document and save it to C:\document\suspect document.doc.
  13. Close Microsoft Word.
  14. Verify the document has been isolated by the layer by confirming that the document in step 8 is not visible in Windows Explorer.

If you disable the policy, then the document will no longer exist because the layer is no longer active for Microsoft Word.