Data Center Security

 View Only
Back to discussions
Expand all | Collapse all

how do i prevent a user from running a program (CMD)?

  • 1.  how do i prevent a user from running a program (CMD)?

    Posted Feb 14, 2017 09:34 AM

    how do i prevent a user from running a program (CMD)?



  • 2.  RE: how do i prevent a user from running a program (CMD)?

    Posted Feb 16, 2017 05:43 AM

    This is already built into the "sym_win_basic_sbp" policy that is created on install.

    CMD and a whole load of other basic MS processes are built into the policy's Global Prevent list.  Alternatively, you could just create an Application Rule for CMD and route it straight to the Deny sandbox