Endpoint Protection

 View Only

  • 1.  Disabling Application Control

    Posted Jun 23, 2010 08:41 AM
    Hi,

    I've applied a policy that disables autorun.inf in every stations through the Application & Device Control policie.
    It works fine, but the problem is that i have a software that cannot be installed successfully while this policy is assigned to it.
    So i was wondering if there is a way to disable the application control service (a CLI command would be the best solution) just for that period of time of installing the software, and then bring that service back up.
    I am aware of the command "smc -stop", but i dont want to stop the AV, only the NTP (stopping only the ADC service would be great!).

    thanks,
    shachar


  • 2.  RE: Disabling Application Control

    Posted Jun 23, 2010 08:44 AM
    Copy the content of the installation cd to hard drive and try to install.It should work...


  • 3.  RE: Disabling Application Control
    Best Answer

    Posted Jun 23, 2010 08:45 AM
    To disable Application and Device Control via registry



    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysPlant

    Change the Value of Start to 4 . 1 –means enabled.


  • 4.  RE: Disabling Application Control

    Posted Jun 23, 2010 08:58 AM

    Yes i think this should work,
    I'll try it and let you know.

    Thanks for the fast reply!

    shachar



  • 5.  RE: Disabling Application Control

    Posted Jun 23, 2010 09:16 AM
    It's not blocking a cd-autorun.
    I am running it from a network share.

    This software installation is pretty complicated.
    The setup calls different batch files and somewhere along this installation it also uses an autorun.inf file.