[There's a reason that Yoda is the unofficial mascot of SBS.  Size indeed matters not.] What rules would you like to be added? - THE OFFICIAL BLOG OF THE SBS DIVA
Mon, Oct 28 2013 23:40 bradley

What rules would you like to be added?

http://www.thirdtier.net/2013/10/exempting-a-program-from-software-restriction-policies/

Amy blogged about some updates to the CryptoLocker tool kit.  I'll be adding some some additional exemptions and rules as well based on some of the stuff I've seen posted on the web, but is there any specific items you'd like added to the list?

Up next in the SMBKitchen docs will be an article on application whitelisting as well as one on how to manage "updates" using Office 2013 click to run.

Filed under:

# re: What rules would you like to be added?

Tuesday, October 29, 2013 10:27 AM by Hugh O'Donnell

I had to add the following for FoxIt Reader's Updater:

%localAppData%\temp\foxit reader updater.exe

I tried %localAppData%\*\foxit reader updater.exe... but that didn't work.

# re: What rules would you like to be added?

Thursday, October 31, 2013 7:38 AM by John Murdoch

Hi Susan

The Java updater runs from %localappdata%\temp and of course the filename for the executable changes with each incremental update.

I suspect that adding a rule for

%localappdata%\temp\jre-*.exe

should cover for future updates, but won't be able to confirm until the next Java update comes out (so probably won't have to wait too long!)

John

# re: What rules would you like to be added?

Thursday, October 31, 2013 9:18 AM by bradley

Others have tried a wildcard, it won't work on exceptions.  You have to specifically list the version number.  :-(

# re: What rules would you like to be added?

Thursday, October 31, 2013 10:35 AM by John Murdoch

Yet another reason to add to the list of why we all hate Java! :-)