Video Screencast Help

how to block cmd.exe by SDCSSA

Created: 08 Apr 2014 | 1 comment

Guys ,

I want to block completely the launch of cmd.exe for a specific group of users in symantec data center security server advanced.(csp6.0)

Operating Systems:

Comments 1 CommentJump to latest comment

Alex_CST's picture

To block a set if users (assuming its an OU inside Active Directory) to launch a program you do this:

Use the No Access Resource Lists inside Home > Global Policy Options > File Rules

Add the resource path of cmd.exe

Add the Program Path of *\* (this makes the rule apply across the entire machine)

Group name of DOMAIN\OU

You can copy this rule into allow but log if you want to test.

Please mark posts as solutions if they solve your problem!

http://www.cstl.com