Rules Examples

In this section:

Allow Access to Selected Windows Store apps

Scenario

  • You are an IT Administrator using Windows 8
  • You are creating an Application Control configuration
  • You have created a Corporate\CallCenter node
  • You want to grant access the certain Windows Store apps

Process

  1. Expand the Group > Corporate\CallCenter node.
  2. Select Denied Items.
  3. Right-click in the work area and select Add > Windows Store App.

    The Browse Windows Store Apps dialog displays.

  4. Select Apply to all Windows Store Apps on the endpoint.
  5. Click OK to deny access to all Windows Store apps.
  6. To specify the Windows Store apps to be made allowed, select Allowed Items.
  7. Right-click in the work area and select Add > Windows Store App.

    The Browse Windows Store Apps dialog displays.

    The dialog is populated with all the available Windows Store apps and contains three columns:

    • Display Name - This column displays the full name of the Windows Store app.
    • Publisher - This column displays the registered company name for any Windows Store apps.
    • Version Matching - This column displays the version of the Windows Store app and the default matching rule of and above.
  8. Select Apply only to the Windows Store Apps selected below.

    Select this option to grant access to all Windows Store apps available on the machine being used to create the configuration file and the endpoints where the configuration is deployed.

  9. Select the Windows Store apps to be allowed.

    If the machine being used to create the Application Control configuration file is not compatible with Windows Store Apps, a predefined list can be imported. For more information, see Configure Group Rules for Windows Store Apps Using Snippets.

  10. From the Version Matching drop-down, use the version filter options to select the version criteria to be met before the selected apps can be accessed.

    There are four rules options available:

    • and above - Select this option to grant access to the current version of the application and any future versions.
    • and below - Select this option to grant access to the application up to and including the current version only.
    • exactly - Select this option to grant access to the current version of the application only.
    • all versions - Select this option to grant access to all versions of the application.

      When the criteria specified in the Version Matching drop-down is matched, the Allowed or Denied Item rules are then applied.

  11. Click OK.

When the configuration is saved and deployed access to the selected applications is granted on endpoints using Windows 8 and above.

Denied Access to Selected Windows Store apps

Scenario

  • You are an IT Administrator
  • You are creating an Application Control configuration
  • You have created a Corporate\CallCenter node
  • You want to prohibit access to some Windows Store apps

Process

  1. Expand the Group > Corporate\CallCenter node.
  2. Select Denied Items.
  3. Right-click in the work area and select Add > Windows Store App.

    The Browse Windows Store Apps dialog displays.

    The dialog is populated with all the available Windows Store apps and contains three columns:

    • Display Name - This column displays the full name of the Windows Store app.
    • Publisher - This column displays the registered company name for any Windows Store apps.
    • Version Matching - This column displays the version of the Windows Store apps and the default matching rule of and above.

    If multiple users have the same app installed on the machine being used to create the configuration, each version is listed and the version number detailed in the Version Matching column.

  4. Select Apply only to the Windows Store Apps selected below.
  5. Select which apps are to be explicitly denied.

    If the operating system on the machine being used to create the Application Control configuration file is not compatible with Windows Store Apps, application snippets can be imported. For more information, see Configure Group Rules for Windows Store Apps Using Snippets.

  6. From the Version Matching drop-down, use the version filter options to select which of the selected apps are to be denied. There are four rules options available:
    • and above - Select this option to prohibit access to the current version of the application and any future versions.
    • and below - Select this option to prohibit access to the application up to and including the current version only.
    • exactly - Select this option to prohibit access to the current version of the application only.
    • all versions - Select this option to prohibit access to all versions of the application.
  7. When the criteria specified in the Version Matching drop-down is matched, the Denied Item rule are then applied.
  8. Click OK.

When the configuration is saved and deployed, users in the Corporate\CallCenter group will only have access to all Windows Store apps but denied from using a select few.

Configuring Group Rules for Windows Store apps Using Snippets

Scenario

  • You are an IT Administrator
  • You have created a Corporate\CustomerServices group rule
  • You are creating a configuration on a machine that is not compatible with Windows Store Apps for users in the group rule.
  • You want to use the application snippets to grant access to certain Windows Store apps for endpoints using Windows 8 and above.

Process

  1. Expand the Corporate\CustomerServices group rule.
  2. Select Allowed Items.
  3. Right-click in the work area and select Add > Windows Store App.

    The Browse Windows Store Apps dialog displays all the available Windows Store apps and contains three columns:

    • Display Name - This column displays the full name of the Windows Store apps.
    • Publisher - This column displays the registered company name for any Windows Store apps.
    • Version Matching - This column displays the version of the Windows Store apps and the default matching rule of and above.
  4. Click Import Snippet.

    The Import Windows Store App Snippet File dialog displays.

    A list of common Windows Store app snippets are included as part of the Application Control console installation and can be found in the console folder within the Application Control installed location.

    Other snippets are available from Ivanti Community, which is opened when you click .

  5. Select the application snippets to be added and click Open. Hold down the Ctrl button on your keyboard to select more than one snippet.
  6. From the Version Matching drop-down, use the version filter options to select which of the selected apps are allowed.

    There are four rules options available:

    • and above - Select this option to grant access to the current version of the application and any future versions.
    • and below - Select this option to grant access to the application up to and including the current version only.
    • exactly - Select this option to grant access to the current version of the application only.
    • all versions - Is applied by default to grant access to all versions of the application.

    When the criteria specified in the Version Matching drop-down is matched, the Allowed or Denied Item rules are then applied.

  7. Click OK.

When the configuration is saved and deployed, users on machines that support Windows Store apps can access the specified apps.

Related topics