IPS global policy read-only resource list does not block new folder creation in C:\ drive

Article:TECH176210  |  Created: 2011-12-05  |  Updated: 2012-09-12  |  Article URL http://www.symantec.com/docs/TECH176210
Article Type
Technical Solution


Environment

Issue



IPS global policy read-only resource list does not block new folder creation in C:\ drive. 
 

Steps to reproduce:

1. Edit policy: sym_win_protection_core_sbp
2. Global Policy Options > Resource Lists  > Read-only Resource Lists
3. Enable: Block modifications to these files
4. Add:  “c:\*"  under the list of files that should not be modified

Current behavior:  A folder can still be created under the root of c: drive. However, the created folder cannot be renamed. That is, you can only have "new folder", "new folder (2)", "new folder (3)", etc. Also you cannot create folder under a subfolder of c: drive.


 


Environment



SCSP 5.2.8.164
Windows XP – SP2/SP3


Cause



The issue exists on XP/2003 and not on 2008. This appears to be a driver issue on XP/2003.



 


Solution



Upgrade the product to 5.2.8 MP4




Article URL http://www.symantec.com/docs/TECH176210


Terms of use for this information are found in Legal Notices