forked from madskristensen/WebCompiler
-
Notifications
You must be signed in to change notification settings - Fork 18
Open
Description
In our organization, applocker is blocking this (and many other extensions). Typically our policies only allow execution from %OSDRIVE%\Program Files, %OSDRIVE%\Program Files (x86) or specific directories in %OSDRIVE%\ProgramData
Things that could help is build allow policies:
- Sign the executables so that we can enable a policy to whitelist based on a signature.
- I also noticed that it looks like an executable gets temporarily copied to a temp directory, which applocker then blocks. If we had to create a policy on a path using a temp directory might be problematic.
This is the error logged by applocker:
%OSDRIVE%\USERS\XXXXX\APPDATA\LOCAL\TEMP\WEBCOMPILER1.14.15\7Z.EXE was prevented from running.
Metadata
Metadata
Assignees
Labels
No labels