Endpoint Protection

Hello,

Im using Application and Device control with one of the built-in settings running "Stop software installers" this stops all setups running but does allow Windows Updates to be carried out.

Does any one know the settings that would allow printers to be installed? At present this poilcy does not allow connection to a network printer when trying to setup from a UNC path.

Any ideas?

Check your Control log on the client as it should show the rule blocking it as well as the Target so you can exlude it.

Go into the application and device control policy, edit the rule that blocks setup.exe click add next to the "Do not apply this rule to the following process" add the location of this setup.exe in the process to match click ok and then ok. Update the policy on machines and check it works. 

Excellent, found the correct service and created a rule to allow, first of all forgot to move it up the chain but now its second in the list all working fine.

Thanks

awesome :)

can share your policy for blocking executables or portable applications is that I am developing one, but this complicates em.

This is now solved and I'm awaiting split resolution decision. 

Admin has to approve it but I can see it's been marked. It may take some time since they're busy :)