Jump to content

Recommended Posts

Posted

Hi

 

I have an executable that I need a non admin to run. The .exe is allowed via applocker but the .exe calls on cmd when it runs which is blocked by applocker so it fails to launch.

 

Is there a way I can leave cmd blocked with applocker but allow this certain application to run it?

 

Thanks

Shane

Posted (edited)

Does it call a specific file to run via cmd or is it just passing a command? If it's trying to run a file then all you need to do is find a copy of the file (or the path it's running from) and then allow that to run through AppLocker too.

 

Event Viewer normally provides some really useful info as to to what is allowed/blocked and where it is running from!

Edited by Cache

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...