install programs without disabling the containment

[cooperbr]

good morning,

Any program that I try to install in the end point, are executed in a virtual way, I need to disable the containment, to be able to install programs that I need.

my question is:

How can I configure so that the same program to install is reliable, and can install it in all the endpoints, without the need to disable the containment?

thank you very much

[Jimmy]

@cooperbr ,

Thank you for your input. Containment will allow files(installers) that are digitally signed or files(installers) that have been manually whitelisted by our AV LAB team. Unrecognized files(installers) will be virtualized and block the ones that have malicious ratings. We can suggest creating a specific exclusion folder for your specific applications.

GBS-ITSMwhite-listingbypath-210317-1933-22.pdf (299 KB)

[dittoit]

@cooperbr

image of my configuration, is the one that comes by default.

I would like to be able to determine what programs I can run without problems.

as an example to install a program, where the installer is in this folder

C: \ GSRBM \ SetupEstacaoCPProMais1.0.2

after installed in this folder

C: \ Program Files (x86) \ Prolink \ OfficeJuridico \ CPPro \ *

thank you

I recommend you clone the policy and make a separate one for each company. Even split it down to workstation and servers etc. Allows for more granular and far greater control. Don’t use the default for all devices.

[cooperbr]

Thank you very much for the help, working perfectly.