IPS global policy read-only resource list does not block new folder creation in C:\ drive
|Article:TECH176210|||||Created: 2011-12-05|||||Updated: 2012-09-12|||||Article URL http://www.symantec.com/docs/TECH176210|
IPS global policy read-only resource list does not block new folder creation in C:\ drive.
Steps to reproduce:
1. Edit policy: sym_win_protection_core_sbp
2. Global Policy Options > Resource Lists > Read-only Resource Lists
3. Enable: Block modifications to these files
4. Add: “c:\*" under the list of files that should not be modified
Current behavior: A folder can still be created under the root of c: drive. However, the created folder cannot be renamed. That is, you can only have "new folder", "new folder (2)", "new folder (3)", etc. Also you cannot create folder under a subfolder of c: drive.
Windows XP – SP2/SP3
The issue exists on XP/2003 and not on 2008. This appears to be a driver issue on XP/2003.
Upgrade the product to 5.2.8 MP4
Article URL http://www.symantec.com/docs/TECH176210