" are not allowed.
' is allowed but didn't help.
? did not help.
Short file names struck me as a genius idea, but didn't work.

So I went with a publisher exception which covers Mr. Casale's point much 
better. And is WAY easier.  It is what I should have done in the first place, 
and will be doing far more of in the future.  I also opened a work order for 
myself to convert my existing exceptions to publisher exceptions.

Appreciate it gang, very much.


-----Original Message-----
From: [email protected] [mailto:[email protected]] On 
Behalf Of Miller Bonnie L.
Sent: Thursday, January 21, 2016 2:31 PM
To: ntsysadm
Subject: RE: [NTSysADM] RE: Applocker Exe rules

I would also try the ? and maybe short file names, if you haven't turned them 
off?  Please report back if you get something to work.

-Bonnie

-----Original Message-----
From: [email protected] [mailto:[email protected]] On 
Behalf Of Kurt Buff
Sent: Thursday, January 21, 2016 11:13 AM
To: ntsysadm <[email protected]>
Subject: Re: [NTSysADM] RE: Applocker Exe rules

I haven't played yet with applocker, but can you

put quotes around it, like so:
"%OSDRIVE%\USERS\KENNEDYJIM\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\LFGGA9WE\GOTOMEETING
LAUNCHER.EXE"

Or, perhaps use the question mark:
%OSDRIVE%\USERS\*\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*\GOTOMEETING?LAUNCHER.EXE



Kurt

On Thu, Jan 21, 2016 at 10:34 AM, Kennedy, Jim <[email protected]> 
wrote:
> Must be applocker week.
>
>
>
> I block c:\users\*\appdata\*
>
>
>
> Having a heck of a time whitelisting the below:
>
>
>
> %OSDRIVE%\USERS\KENNEDYJIM\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\I
> E\LFGGA9WE\GOTOMEETING
> LAUNCHER.EXE
>
>
>
> I think the space in the exe is getting me but can’t find any 
> references to how to handle spaces.
>
>
>
> I have tried a bunch of variations on the excpetion tab, a few examples:
>
>
>
> %OSDRIVE%\USERS\*\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*\GOTOM
> EETING
> LAUNCHER.EXE
>
> %OSDRIVE%\USERS\*\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*\GOTOM
> EETING*.EXE
>
>
>
> Even just the exe which normally works really well
>
>
>
> GOTOMEETING LAUNCHER.EXE
>
> GOTOMEETING *.exe
>
> GOTOMEETING*
>
>
>
>
>
>
>
>


Reply via email to