Hate to chime in like a salesman, but there are third-party tools like AppSense, RES and Scense which can handle this much more intelligently, if you've got budget available to make your lives easier.
Feel free to hit me up on- or off-list if you're wanting any further details. Cheers, JR Sent from my slightly schizophrenic, but rather cool, BlackBerry Android From:[email protected] Sent:21 January 2016 7:32 pm To:[email protected] Reply to:[email protected] Subject:RE: [NTSysADM] RE: Applocker Exe rules I would also try the ? and maybe short file names, if you haven't turned them off? Please report back if you get something to work. -Bonnie -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Kurt Buff Sent: Thursday, January 21, 2016 11:13 AM To: ntsysadm <[email protected]> Subject: Re: [NTSysADM] RE: Applocker Exe rules I haven't played yet with applocker, but can you put quotes around it, like so: "%OSDRIVE%\USERS\KENNEDYJIM\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\LFGGA9WE\GOTOMEETING LAUNCHER.EXE" Or, perhaps use the question mark: %OSDRIVE%\USERS\*\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*\GOTOMEETING?LAUNCHER.EXE Kurt On Thu, Jan 21, 2016 at 10:34 AM, Kennedy, Jim <[email protected]> wrote: > Must be applocker week. > > > > I block c:\users\*\appdata\* > > > > Having a heck of a time whitelisting the below: > > > > %OSDRIVE%\USERS\KENNEDYJIM\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\I > E\LFGGA9WE\GOTOMEETING > LAUNCHER.EXE > > > > I think the space in the exe is getting me but can’t find any > references to how to handle spaces. > > > > I have tried a bunch of variations on the excpetion tab, a few examples: > > > > %OSDRIVE%\USERS\*\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*\GOTOM > EETING > LAUNCHER.EXE > > %OSDRIVE%\USERS\*\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*\GOTOM > EETING*.EXE > > > > Even just the exe which normally works really well > > > > GOTOMEETING LAUNCHER.EXE > > GOTOMEETING *.exe > > GOTOMEETING* > > > > > > > >
