You can create advanced pop-up messages that appear when users attempt to start an application that requires them to justify access to the application. Advanced messages can also be used to let users know that an application is being blocked or usage of the application is being logged.
This document contains detailed information about the following types of advanced messages:
Group Member Authenticated Messages
Advanced Feedback Messages
Advanced Feedback Messages require users to justify their need to use an application.
Justify Application Elevation Action
The Justify Application Elevation Action is to be used with the User Requested Run As Administrator Filter in an Application Control Policy. This action collects information from users and creates reports on the server for approval requests.
Justify Application Message Action
The Justify Application Message Action is used to collect information from users and create reports on the server with reasons why a user was running an application that hasn't been approved or denied yet.
Group Member Authenticated Messages
Group member authenticated messages can be used to gather justifications from end-users and require a user account in a certain domain user group to provide their credentials in order for the request to proceed. This process is also known as an Over-the-shoulder request, meaning that the end-user will have to get their boss or a member of a specific domain user group to approve the request.
Approval Request Messages
The Approval Request messages are similar to the justification messages because they both gather feedback from end users and report it in the Arellia console. Approval request messages also allow for end-users to see a waiting screen until their request has been either approved or denied. (For more information, go to Request Elevation.)
Approval Request Advanced Message
You can configure the color, text, and images in request messages in the Security Manager Console under Policies > Arellia Solutions > Application Control > Messages > Advanced Messages.
These messages will then show a waiting screen until the request is either approved or denied by your help desk.
No Required Input Messages
No required input messages differ from the Advanced Feedback Message Actions because they do not require a justification to continue. End users need only acknowledge the displayed message. This feature requires that the Microsoft .Net Framework is installed on client machines.
From the Policies tab, these types of Advanced Messages are found in Application Control / Actions / Messages / Advanced.
Application Denied Message Action
This action stops an application from being launched and informs users that the application is blocked.
Application Denied Notification Action
This action displays a notification to the user that the process has been denied by a policy. The notification window will fade in and out and automatically close after a period of time.
Application Warning Message Action
This action displays a warning to users that the application has not been approved yet before continuing on with the process.
