Whitelist/blacklist applications on Windows

Usage and Config BFI
1

Hii guys,

Can BigFix whitelist/blacklist applications on Windows?
if possible, how to do it?

Thanks,
Benu

2

I don’t believe there is a direct way to accomplish this, however I used to create local security policies years ago to prevent specific executables from running on devices; you may apply the same technique to prevent any executable from running.

Policy Path:
Gpedit.exe --> User Configuration --> Administrative Templates --> System --> Dont run specified Windows Applications

Any executable you specify here will automatically have the corresponding reg key appear in the registry at the path below:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun

You may easily use the reg format to increase the block list of the programmes you want to block using BigFix action script.

3

Hii @vk.khurava ,
thank you for responding.

Can you give me an example of an action script format for block list ?

4

Here we go:

5

I’ve tried that script, but it still doesn’t work.

6

Below method is working for me:

action uses wow64 redirection false 

override wait 
runas=currentuser
hidden=true
wait reg.exe add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /t REG_DWORD /v DisallowRun /d 1 /f 

override wait 
runas=currentuser
hidden=true
wait reg.exe add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /t REG_SZ /v FireFox /d FireFox.exe /f
8

The problem has been resolved, thanks for helping me.

1 Like