Using the Ivanti Device and Application Control Authorization Service Tool

You can use the Ivanti Device and Application Control Authorization Service Tool to monitor approved and synchronized changes to executable file authorization policies using Microsoft® Update Services (SUS) and Windows® Server Update Services (WSUS).

The Ivanti Device and Application Control Authorization Service Tool service authorizes all approved Microsoft® updates and fixes, creates corresponding hash files, and updates the database.

  1. From the location where you saved the Ivanti Device and Application Control application software, run the \server\authsrv\setup.exe file.
    The Welcome page opens.
  2. Click Next.
    The License Agreement page opens.
  3. Review the license agreement and, if you agree, select I accept the terms in the license agreement.
  4. Click Next.
  5. From the Ivanti Device and Application Control Application Server dialog, enter an Application Server IP address in the corresponding field.
  6. Click Next.
    The Software Update Services dialog opens.
  7. Select either Microsoft Software Update Services (SUS version 1.0) or Microsoft Windows Server Update Services (WSUS version 2.0 and greater).
  8. Select any of the following Ivanti Device and Application Control Authorization Service Options.
    • Provide information on each scan by e-mail
    • Use verbose report mode
    • Do not automatically start Ivanti Device and Application Control Authorization Service when Setup is finished

    If you choose to Provide information on each scan by e-mail, the E-mail configuration dialog opens. The Ivanti Device and Application Control Authorization Service tool does not support Outlook Express or Internet Information Server (IIS) as clients for sending email messages. If there is already an account for these types of clients, the SMTP IP address is transferred directly to the Ivanti Device and Application Control Authorization Service configuration.

    If you select Do not automatically start Ivanti Device and Application Control Authorization Service when Setup is finished, the service will automatically start when one of the following events occurs:

    • A change is made by WSUS in the default update folder.

    • An administrator approves the SUS updates using the Management Console.

    • One hour elapses after installing the Ivanti Device and Application Control Authorization Service.

  9. Click Next.
  10. From the Destination Folder dialog, click Change to choose an installation destination folder other than the default folder C:\Program Files\Ivanti\Device and Application Control\.
  11. Click Next.
    The Ready to Install the Program dialog opens.
  12. Click Install.
    A progress bar runs on the page, showing installation progress.
    The Completed page opens.
  13. Click Finish.

The Ivanti Device and Application Control Database Explorer window shows the specified installation directory(s) in the Files tab.

After Completing This Task

After installing the Ivanti Device and Application Control Authorization Service Tool you must configure and synchronize WSUS. See Configure and Synchronize WSUS on the Microsoft documents site for more information about configuring WSUS or SUS.

You can modify Ivanti Device and Application Control Authorization Service Tool by rerunning the Authorization Service Tool.

Related Information

Related Tasks