App locker rule to allow a single user access to an application

[Guest Guest]

We have a new member of staff starting in September who is Dyslexic and requires an application to assist her. We have a single user license, which can be installed school wide as long as we lock down usage to this user. I've created rules in Applocker to block access to all users and added an additional rule allowing this user access. However, access is still being blocked. I realise I could get around this by creating a new security group with everyone bar this member of staff in, but I'd rather not do this.

 

Has anyone had any experience of this scenario?

 

Any help is greatly appreciated

[free780]

Basically a deny rule takes Precedent.

If the app is going on all devices, is it not installed in Program Files? Other than that you could create an Allow rule for the user, ideally for a certificate as long as the app is signed.

[Guest Guest]

The app is in Program Files. I have a rule denying executables from the applications folder and a rule allowing for the user who requires access. However, the user still gets denied access

[Steve21]

As mentioned above the deny will take precedence. AppLocker works in reverse to SRP.

 

Why not just remove the block on the application folder, and only give that user the shortcut?

 

Steve

[Guest Guest]

I got this working with app locker. I added a path exception to the default allow all in program files rule and created a rule allowing the app for the user who requires it