I want to exclude a BAT file from ePO server. (Access protection rules-Common Standard Protection-Prevent programs registering to autorun. Here it is excluding only exe files, But I want to exclude a batch file which contains some basic scripts.
Here it is my log from Access protection rule,
09-01-2015 10:06:49 Blocked by Access Protection rule MY-PC\Administrator C:\Windows\system32\DllHost.exe C:\USERS\USER1\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\LOCK.BAT Common Maximum Protection:Prevent programs registering to autorun Action blocked : Create
09-01-2015 10:14:53 Blocked by Access Protection rule MY-PC\USER1 C:\Windows\Explorer.EXE C:\Users\USER1\AppData\Roaming\Microsoft\Windows\START MENU\Programs\Startup\lock.bat Common Maximum Protection:Prevent programs registering to autorun Action blocked : Read
Is it possible..? Is it right way to do this..?
Please suggest and help me.
It is possible excluding the processes Explorer.EXE and DllHost.exe under the rule Common Maximum Protection:Prevent programs registering to autorun but I wouldn't do it as you are opening a SECURITY hole...