Prevent read and write to file types or network locations
Scenario description
In this scenario, the end user has the following installed:
- Microsoft Word
- Microsoft Excel
Scenario resolution
- On the managed computer, create a Microsoft Word document and save it to c:\company invoices\invoice 101.doc.
- Once you are in Arellia select the Policies tab.
- Select Application Control > Policies.
- Right-click Policies and select New > Blank Application Control Policy.
- Configure the policy as follows:
- Name - "Write-protect Word documents in the Company Invoices directory."
- Description - Prevent Microsoft Word from having write access to, or creating new Word documents in the company invoices directory.
- Apply to: - All Windows Computers with Application Control Agent Installed.
- Under Application Actions Tab, check "Send policy feedback."
- Under Policy Enforcement Tab, check "Continue enforcing policies for child processes after enforcing this policy."
- Under Applications to Control Tab, click the Include link, select MS Word in the Items Selector dialog, and click OK.
- Under Application Actions Tab, select Application Action and Select an Item.
- Select Deny File Access and click OK.
- In the Deny File Access dialog, enter the following in the appropriate fields:
- Name - Prevent write access of Word documents to Company Invoice directory.
- Path - C:\company invoices.
- Mime type - Word document.
- Click Apply and close the dialog.
- In the Items Selector dialog, select the new Deny File Access Application Action, and click OK.
- Enable the policy and click Apply.
- In Microsoft Word, open C:\company invoices\invoice 101.doc. The file is read only and can't be modified.
Other scenario tests
- Create a new document and attempt to save it to c:\company invoices\. You will be unable to open it and will receive a File Permission error.
- Verify that a Word document can be created or modified in a different directory.
- In Microsoft Excel, save a spreadsheet to the same location as Step 1. The permissions are limited to Microsoft Word.