Skip to content

Enable use with applocker #118

@jerchap

Description

@jerchap

In our organization, applocker is blocking this (and many other extensions). Typically our policies only allow execution from %OSDRIVE%\Program Files, %OSDRIVE%\Program Files (x86) or specific directories in %OSDRIVE%\ProgramData

Things that could help is build allow policies:

  • Sign the executables so that we can enable a policy to whitelist based on a signature.
  • I also noticed that it looks like an executable gets temporarily copied to a temp directory, which applocker then blocks. If we had to create a policy on a path using a temp directory might be problematic.

This is the error logged by applocker:

%OSDRIVE%\USERS\XXXXX\APPDATA\LOCAL\TEMP\WEBCOMPILER1.14.15\7Z.EXE was prevented from running.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions