Application Control powered by AppSense

Denied Items

In this section:

About Denied Items

Denied Item nodes are sub-nodes automatically created in any Rule node when you create a new rule. They allow you to add items to which the groups, users and devices specified in the rule are refused access.

If you are using the default option, which trusts all locally installed Trusted Owner applications, you only need to add specific applications that you do not want users to run. For instance, you can add administrative tools, such as management and registry editing tools. 

You do not need to use this list to deny applications that are not owned by an administrator because they are blocked by trusted ownership checking.

Application Control drag and drop functionality can be used to add files, folders, drives and signature items from Windows Explorer or copy or move items between the Allowed Items node and Denied Items nodes in each of the main configuration nodes.

You can add the following items:

Add a Denied Item

To add an item, select the Denied Items node and click the Add Itemdrop-down arrow on the Rule Items ribbon, select Deniedand select the type of Denied Item you want to add.

This task prevents all users accessing an application on a network share:

  1. Select the Denied Items node in Rules > Group > Everyone.
  2. Click Add Item in the Rule Items ribbon and select Denied.
  3. Select File.

    The Add a File dialog displays

  4. Enter or browse for an application, for example, regedit.exe.

    The selected application is listed in the Denied Items work area.

  5. Attempt to run the selected application.

    The application is denied and a message box displays with the notification that the application is not authorized.

Remove a Denied Item

  1. Select the item to remove in the Denied Items node.
  2. In the Rule Items ribbon, click Remove Item.
  3. Click Yes in the confirmation dialog.

The item is removed from the node.

Related topics

Was this article useful?    

The topic was:



Not what I expected