Whitelisting reference systems

In this scenario you will create a reference system whitelist policy that targets a collection of computers, searches for Windows executables, then adds any Windows executables not currently in a security catalog to a whitelist. You will also add applications already included in a security catalog to the whitelist.

To create a reference system whitelist policy

1. In the Altiris Console, click the Tasks tab.
2. In the left pane, right-click Tasks > Security Management > Application Control > Windows > Application Control Tasks > Application Control Policies.
3. Select New > Reference System Whitelist.
4. In the right pane, configure the fields as follows:
   • Check Enable.
   • Computers - Leave the default setting, All Windows Computers with
     Application Control Agent Installed.
   • Reference System Options, Computers - In the dialog, select the computer collection you wish to target with the policy.
   • File Specification(s) - In the dialog, select Executables in Windows
     Directories.
   • Reporting Filter - In the dialog, select Executables in Windows Directories not present in Security Catalogs.
   • Applications to Control, Application - In the dialog, select Present in Signed
     Security Catalog.
5. Click Apply.