Reference Guide

Security Management Server Virtual - AdminHelp v9.8
203
in the Application Control Allowed Folders policy.
IMPORTANT: Specify the following folder in the Application
Control Allowed Folders policy when running Data Guardian
Protected Office mode with this policy Selected:
C:\Users\<Username>\AppData\Local\assembly\tmp
This policy does not apply to Mac clients.
Application
Control Allowed
Folders
String
String
Specify folders to be excluded from Application Control
lockdown.
IMPORTANT: Specify the following folder in this policy when
running Data Guardian Protected Office mode with the
Application Control policy Selected:
C:\Users\<Username>\AppData\Local\assembly\tmp
Enable Change
Window
Not Selected
Selected
Not Selected
If selected, Application Control is temporarily disabled to
allow, edit, and run new applications or perform updates.
This includes updating the Advanced Threat Prevention agent.
After performing the necessary changes, deselect Enable
Change Window.
Note: Enable Change Window retains changes made to
Application Control. Deselecting Application Control and
resetting back to Selected resets Application Control to
default values.
This policy does not apply to Mac clients.
Script Control
Script Control
Not Selected
Selected
Not Selected
If Selected, Script Control protects devices by blocking
malicious scripts from running.
Note: Script Control is currently only available for PowerShell
and Active Scripts.
This policy does not apply to Mac clients.
Script Control
Mode
Alert
Alert
Block
Alert monitors scripts running in the environment.
Recommended for initial deployment.
Block allows scripts to run only from specific folders. This
should be used only after testing in Alert mode.
This policy does not apply to Mac clients.
Active Script Alert
Alert
Block
Alert monitors Active Scripts running in the environment.
Recommended for initial deployment.
Block allows Active Scripts to run only from specific folders.
This should be used only after testing in Alert mode.
This policy does not apply to Mac clients.