Authorizing Executable Files

You can use the Authorization Wizard to scan a reference computer to build an initial list of centrally authorized files.

  1. Select Windows Start > Programs > Ivanti > Ivanti Device and Application Control Management Console > Authorization Wizard.
    The Authorization Wizard dialog opens.
  2. Click Next.
    The wizard advances to the Options - Authorization Wizard dialog.
  3. Enter the name of a computer to connect to the Application Server, using one of the following options:
    • Type the server name (my_server)
    • Type the server IP address (192.168.1.1)
    • Click different user name to use other server connection credentials (another dialog opens and you type the user name and password)

    When you can only leave certain non-standard ports open in your firewall, you need to specify the server TCP port number between square brackets, for example: server[1234].

    1. Click Check Server to verify the connection.
  4. Select or clear the Process known files automatically check box as follows:
  5. Option Description
    Select Add existing files to the database that match an existing database entry with a different digital signature, and assign the files to existing file groups.
    Clear Identify unknown files and process them manually.
  6. Click Next.
  7. To browse to the root directory that you want to scan for executable files, select one of the following options, then click the ellipsis adjacent to the Source field.
  8. Option Description
    Directory If you are scanning from a directory
    File If you are scanning from a file or compressed archive file.
  9. To select the temporary directory where the wizard can expand compressed files, click the ellipsis adjacent to the Extract temporary files to: field.
  10. Caution: If the Free space for extraction falls below 100 MB, you receive a message prompting you to create more free disk space.

  11. Click Start.
    The Assigning File(s) - Authorization Wizard - Connected dialog opens. The wizard searches the source directory or file and lists the number of files found.
  12. Click Next.

    If you select the Process known files automatically option, the wizard processes all executable files and assigns them to corresponding file groups. If a matching filename exists in the database and is assigned to a file group, the wizard assigns the new file definition to the same file group. The results are summarized as follows:

    • Number of files processed
    • Number of files assigned to file groups
    • Number of files as duplicates of previously assigned files

    The Assigning Files - Authorization Wizard - Connected Summary dialog opens.

  13. Click Next.
    The Assigning Files - Authorization Wizard - Connected dialog opens. The wizard lists files that are not assigned to file groups because they do not match existing filenames in the database or cannot be processed automatically.
  14. To manually assign the unknown file(s) to a file group, select one or more file names from the File Name list.
  15. Click the Suggested File Group drop-down list or File Groups to select a file group for assignment.
  16. Click Next.
    The new file definitions are added to the database.
  17. Click Finish.
    You may select the Restart the wizard to add more files or CDs option.

The selected files are assigned to file groups.

After Completing This Task

You may need to update user access permissions to enable users or user groups to run newly authorized applications.