I would also try the ? and maybe short file names, if you haven't turned them 
off?  Please report back if you get something to work.

-Bonnie

-----Original Message-----
From: [email protected] [mailto:[email protected]] On 
Behalf Of Kurt Buff
Sent: Thursday, January 21, 2016 11:13 AM
To: ntsysadm <[email protected]>
Subject: Re: [NTSysADM] RE: Applocker Exe rules

I haven't played yet with applocker, but can you

put quotes around it, like so:
"%OSDRIVE%\USERS\KENNEDYJIM\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\LFGGA9WE\GOTOMEETING
LAUNCHER.EXE"

Or, perhaps use the question mark:
%OSDRIVE%\USERS\*\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*\GOTOMEETING?LAUNCHER.EXE



Kurt

On Thu, Jan 21, 2016 at 10:34 AM, Kennedy, Jim <[email protected]> 
wrote:
> Must be applocker week.
>
>
>
> I block c:\users\*\appdata\*
>
>
>
> Having a heck of a time whitelisting the below:
>
>
>
> %OSDRIVE%\USERS\KENNEDYJIM\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\I
> E\LFGGA9WE\GOTOMEETING
> LAUNCHER.EXE
>
>
>
> I think the space in the exe is getting me but can’t find any 
> references to how to handle spaces.
>
>
>
> I have tried a bunch of variations on the excpetion tab, a few examples:
>
>
>
> %OSDRIVE%\USERS\*\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*\GOTOM
> EETING
> LAUNCHER.EXE
>
> %OSDRIVE%\USERS\*\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*\GOTOM
> EETING*.EXE
>
>
>
> Even just the exe which normally works really well
>
>
>
> GOTOMEETING LAUNCHER.EXE
>
> GOTOMEETING *.exe
>
> GOTOMEETING*
>
>
>
>
>
>
>
>


Reply via email to