Endpoint Protection

 View Only
  • 1.  Tamper Protection

    Posted Mar 24, 2011 06:07 AM

    Is there a way of adding my own prefixes for using wild cards to allow the below;

    Target:  C:\Users\[username]\AppData\Local\Enterprise Vault Discovery Accelerator\Client\AcceleratorClient.Exe

    There is a prefix for the all users appdata but i can't see one that would be dymanic to work irrespective of the user logged on (adding this manually for each users is not an option once it gets above 5)

    I was thinking something along the lines of;

    %[userprofile]%\AppData\Local\Enterprise Vault Discovery Accelerator\Client\AcceleratorClient.Exe

    Will this work?

    (using RU6MP2)

    Cheers,

    Mike



  • 2.  RE: Tamper Protection
    Best Answer

    Posted Mar 24, 2011 07:22 AM

    I have seen this %userprofile% exclusions and seems to be working, Have seen that in few environments where they have used the userprofile variable.



  • 3.  RE: Tamper Protection

    Posted Mar 24, 2011 07:35 AM

    Excellent - just given it a go and appears to be working fine, ta very muchly.