Reference Guide

Manage Policies
204
Macros Alert
Alert
Block
Alert monitors Office macros running in the environment.
Recommended for initial deployment.
Block allows Office macros to run only from specific folders.
This should be used only after testing in Alert mode.
Note: Starting with Office 2013, macros are disabled by
default. Most of the time, users should not be required to
enable macros to view the content of an Office document.
Dell recommends enabling macros only for documents from
trusted users. Otherwise, macros should always be disabled.
This policy does not apply to Mac clients.
PowerShell Alert
Alert
Block
Alert (default) - Monitors PowerShell scripts running in the
environment. Recommended for initial deployment.
Block - Allow PowerShell scripts to run only from specific
folders. This should be used only after testing in Alert mode.
This policy does not apply to Mac clients.
PowerShell
Console
Allow
Allow
Block
Allow (default) - Allows the PowerShell v3 console to be
launched.
Block -
Blocks the PowerShell v3 console from being launched.
Provides additional security by protecting against the use of
PowerShell one-liners.
Note: If this policy is set to Block and you use a script that
launches the PowerShell console, the script will fail. It is
recommended that users change their scripts to invoke the
PowerShell scripts, not the PowerShell console.
This policy applies only to PowerShell v3 and does not apply
to Mac clients.
Enable Approve
Scripts in Folders
(and Subfolders)
Not Selected
Selected
Not Selected
Allows scripts stored in specific folders to be automatically
approved to run. This policy must be selected in order to use
the policy, Script Control Approve Scripts in Folders (and
Subfolders).
This policy does not apply to Mac clients.
Approve Scripts in
Folders (and
Subfolders)
String
String
Folders specified in this policy are excluded from actions
performed based on the Script Control policy. This exclusion
extends to subfolders of folders that are specified with this
policy.
A folder must be specified using its relative
path. A path may
not include the drive letter. Example: \Cases\ScriptsAllowed
A specified path may represent any of the following:
- local drive path
- mapped network drive path
- universal naming convention (UNC) path
This policy does not apply to Mac clients.
Disconnected Mode
Global Allow
(available only in
Disconnected
mode)
String
String
This policy will NOT be sent to the client if the Server does
not detect a Disconnected mode install token. The token is
prefixed with *DELLAG*.
The value of this policy must include the entire contents of
the policy.xml file. Copy and paste the contents of policy.xml
into the policy editor and shown in this example.