Papercut Client and Applocker

[jertsy]

Hi

 

I am implementing Applocker and we deploy the papercut client via a batch file in the startup folder on the start menu, when I squish cmd from running in Applocker this kills the process and the client can’t run. Before I deploy the pc-client-admin-deploy.msi to all stations has anyone found a way of getting the paprcut batch file to run, yet blocking all other cmd files?

 

Cheers

Jertsy

[snagrat]

We run the client from the exe from a network share on login. No cmd and no deploying msi

[Steve21]

We have it just running direct from local drive but using the "Run" option in registry. No cmd involved.

 

Steve

[jertsy]

We run the client from the exe from a network share on login. No cmd and no deploying msi

 

Did you use this policy to achieve this? Computer Configuration\Administrative Templates\System\Logon\Run These Programs at User Logon

[snagrat]

Did you use this policy to achieve this? Computer Configuration\Administrative Templates\System\Logon\Run These Programs at User Logon

 

Yes we do

[jertsy]

Cheers guys, I will give that a whirl.

[enjay]

As @snagrat , we have it running from a network share. We call it via a shortcut in the [Redirected Start Menu]\Programs\Startup though.

 

We call the local cache version though, not the normal one, as that behaved better with our power management settings which have the PCs hibernating.

Edited November 10, 2016 by enjay

[jertsy]

As @snagrat , we have it running from a network share. We call it via a shortcut in the [Redirected Start Menu]\Programs\Startup though.

 

We call the local cache version though, not the normal one, as that behaved better with our power management settings which have the PCs hibernating.

 

We used the local cache one via redirected startup too but via batch file. I have now changed it to run the exe from the papercut share using the gpo setting Computer Configuration\Administrative Templates\System\Logon\Run These Programs at User Logon as per @snagrat suggestion and it seems to work well.