Endpoint Protection

se habililto una politica en  Application and Device Control - Block access to scripts- [AC7-2.1] File and Folder Access Attempts

Con se bloquean todos los scrip  *\*.bat  *\*.reg  *\*.vbs  *\*.cmd  *\*.cs, mi empresa utiliza algunos archivos .bat y requiero excluirlos.

Me pueden apoyar en  indicarme si es posible excluirlos y como hacerlo.

In that policy, on the Properties tab under 'Do not apply to the following files and folders' add *\*.bat and remove it from 'Apply to the following files and folders'

If you want to exclude all .bat files, just remove '*\*.bat' from the 'Apply to the following files and folders' list. Otherwise, if you only want to exclude some particular .bat files, insert them into the 'Do not apply to the following files and folders' list.

Thank you very much       

, as you indicated exclude me.

a question, the exclusion can be done by fingerprint.

Yes, you can exclude using has as well if using one of the following conditions:

• Launch Process Attempts
• Terminate Process Attempts
• Load DLL attempts

You cannot do it by hash for the File and Folder Access Attempts condition