Auto-elevate applications from approved websites

Owned by Max Pinion (Deactivated)
Last updated: Jul 06, 2016
2 min read

Application Control Solution targets applications based on where they were downloaded from so that you can choose to allow standard users to install signed software from approved websites.

To set up a Download Source Filter, do the following steps:

  1. In the Thycotic Security Manager, click Policies. 
  2. In the file library in the left pane, navigate to Policies > Thycotic Solutions > Application Control > Filters > My Filters. 
  3. Right-click the My Filters folder and click New > Dynamic File Filters > Download Source Filter.
  4. In the Create Item dialog box, enter the Name and Description.

     
     
  5. In the right pane, click the following settings:
    1. If, for example, you want to target all of adobe.com and all sub-domains of adobe.com, then in the Match Type menu choose Partial.
    2. In the Download host field enter adobe.com.
  6. Click Save.

To set up the privilege elevation policy, do the following steps:

  1. In the file library in the left pane, navigate to Policies > Thycotic Solutions > Application Control > Policies.
  2. Right-click Policies and click New > Elevate Process Rights. 

  3. In the Create Item dialog box, enter the Name and Description.
  4. In the right pane under Settings, next to Applications click the Select link. 
     
  5. Highlight and choose the applications the policy should target to the new download source filter you created previously.
  6. Click Save.

 

Note

For additional security, we recommend you include a signed file filter that uses trusted certificate(s) from that domain.

 

This policy will now automatically elevate applications downloaded from adobe.com and signed by the current Adobe certificate. 

Download source filter