" are not allowed. ' is allowed but didn't help. ? did not help. Short file names struck me as a genius idea, but didn't work.
So I went with a publisher exception which covers Mr. Casale's point much better. And is WAY easier. It is what I should have done in the first place, and will be doing far more of in the future. I also opened a work order for myself to convert my existing exceptions to publisher exceptions. Appreciate it gang, very much. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Miller Bonnie L. Sent: Thursday, January 21, 2016 2:31 PM To: ntsysadm Subject: RE: [NTSysADM] RE: Applocker Exe rules I would also try the ? and maybe short file names, if you haven't turned them off? Please report back if you get something to work. -Bonnie -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Kurt Buff Sent: Thursday, January 21, 2016 11:13 AM To: ntsysadm <[email protected]> Subject: Re: [NTSysADM] RE: Applocker Exe rules I haven't played yet with applocker, but can you put quotes around it, like so: "%OSDRIVE%\USERS\KENNEDYJIM\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\LFGGA9WE\GOTOMEETING LAUNCHER.EXE" Or, perhaps use the question mark: %OSDRIVE%\USERS\*\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*\GOTOMEETING?LAUNCHER.EXE Kurt On Thu, Jan 21, 2016 at 10:34 AM, Kennedy, Jim <[email protected]> wrote: > Must be applocker week. > > > > I block c:\users\*\appdata\* > > > > Having a heck of a time whitelisting the below: > > > > %OSDRIVE%\USERS\KENNEDYJIM\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\I > E\LFGGA9WE\GOTOMEETING > LAUNCHER.EXE > > > > I think the space in the exe is getting me but can’t find any > references to how to handle spaces. > > > > I have tried a bunch of variations on the excpetion tab, a few examples: > > > > %OSDRIVE%\USERS\*\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*\GOTOM > EETING > LAUNCHER.EXE > > %OSDRIVE%\USERS\*\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*\GOTOM > EETING*.EXE > > > > Even just the exe which normally works really well > > > > GOTOMEETING LAUNCHER.EXE > > GOTOMEETING *.exe > > GOTOMEETING* > > > > > > > >
