About application and device control

Article:HOWTO80859  |  Created: 2012-10-24  |  Updated: 2014-09-21  |  Article URL http://www.symantec.com/docs/HOWTO80859
Article Type
How To


About application and device control

You can use application and device control to monitor and control the behavior of applications on client computers and manage hardware devices that access client computers. You can also control applications by setting up system lockdown to allow only approved applications on client computers.


Both application control and device control are supported on 32-bit and 64-bit computers.

You use an Application and Device Control policy to configure application control and device control on client computers. You use the Policies tab on the Clients page to set up system lockdown.


Application control and system lockdown are advanced security features that only experienced administrators should configure.

A summary of the application and device control features is given here.

Application control

You can use application control to control applications in the following ways:

  • Prevent malware from taking over applications

  • Restrict the applications that can run

  • Prevent users from changing configuration files

  • Protect specific registry keys

  • Protect particular folders, such as \WINDOWS\system

Device control

You can use device control to control devices in the following ways:

  • Block or allow different types of devices that attach to client computers, such as USB, infrared, and FireWire devices

  • Block or allow serial ports and parallel ports

System lockdown

You can use system lockdown to control applications in the following ways:

  • Control the applications on your client computers.

  • Block almost any Trojan horse, spyware, or malware that tries to run or load itself into an existing application.

System lockdown ensures that your system stays in a known and trusted state.


If you do not implement system lockdown carefully, it can cause serious problems in your network. Symantec recommends that you implement system lockdown in specific stages.

See Configuring system lockdown.

See About Application and Device Control policies

See Setting up application and device control

Legacy ID


Article URL http://www.symantec.com/docs/HOWTO80859

Terms of use for this information are found in Legal Notices