Process Termination

Use this option to protect processes, such as antivirus software from termination by all users, including administrators. Users will still be able to stop processes, for example, by clicking "Close" in an application's UI, but they will not have the ability to forcibly terminate a process, like ending a task from the Details tab in Task Manager. You can specify an individual file, or you can target all processes within a specific folder.

Optionally, add Metadata to include additional criteria for matching files and folders.

Process Termination rule is available for manage user privilege, and self-elevate rule types. This topic uses the manage user privilege options as an example, but the workflow is similar for the other options.

Adding Process Termination

To add a process termination control rule, follow these steps:

  1. On the Rule page, select I want to manage user privileges.
  2. Click Next.
    The What Type page appears.
  3. Select Process Termination, and click Next.
    The What page appears.
  4. From the Select a source option, select the following based on your requirement:

    Select this option to protect individual processes from being terminated.

    To create file controls, follow these steps:

    1. Under the File section, specify the path to the application or file in the Path field.

    2. Enable the Use regular expressions option and enter a regular expression. A regular expression can be used to define the files to target.

    3. Select the Policy Type based on the following:

      • Restrict: Select this option to prevent the named applications from being terminated.

      • Default: Select this option to restore termination privileges for the named applications.

    4. Click Add.
      The process termination rule items are added, and applications or files are displayed under the Selected Items section.

    Select this option to protect all applications with the named folder from being terminated.

    To create folder controls, follow these steps:

    1. Under the Folder section, specify the path to the folder in the Path field.

    2. Enable the Use regular expressions option and enter a regular expression. A regular expression can be used to define the files to target.

    3. Select the Include subfolders option to include sub-folders for the path provided.

    4. Select the Policy Type based on the following:

      • Restrict: Select this option to prevent the application with the named folder being terminated.

      • Default: Select this option to restore termination privileges for the named folder.

    5. Click Add.
      The process termination rule items are added to folders are displayed under the Selected Items section.

  5. To assign the process termination rules to user or device groups, click Next.
    For more information about assigning user or device groups, refer to Manage User Privilege Rule.