Login to participate
Endpoint Management & Virtualization BlogsRSS

How do you monitor an application when a user renames the file?

Admin's picture

Q:
A monitor was set up by specifying the File Name and Internal Name which prevents the user from running the application. If the user renames the file, the denial no longer works. Is there a solution?

A:
When monitoring an application, the attributes of the file must match all values specified in the monitor. If a value is specified in the monitor, and the application does not match that value, then the application will not be denied.

To resolve this issue, instead of specifying the File Name and Internal Name, only specify the Internal Name. Then if the user modifies the file name, it will still be denied.

Scott Hardie's picture

Applications with no internal name

If you run into applications that have no internal name choose one or more attibutes. File Name should be the last choice as a best practice.

James "Scott" Hardie
Vice President of Technology Services
shardie@xcendgroup.com
http://www.xcendgroup.com

James "Scott" Hardie
Manager Systems Engineering
scott_hardie@symantec.com
http://www.symantec.com

mszczesniak's picture

Problem with blocking

But there is still issue when end users put application on network drive - some of them still works. Even if application has Internal Name or other attributes these are not seen be Altiris Agent and can be started. Do anyone has soution for that ?