we want to deny the use of a specific program and defined it in the policy for "unwanted programs". The standard policy for access (action/ If PUP is found) is set to: "First Action: Delete unwanted program at detection" (names may not identical to english - got everything in german here). Any clues were I`m going wrong or does this is within a wanted/normal behaviour?
On a testmachine the User is not confronted with any Dialog or anything but of course we get E-Mails about the detection.
This question may be better answered on the VirusScan discussion group rather than ePO. It's more about the product configuration.