Conditional Application Access Template

This template imports a predefined action that hides or denies access to applications in the session, and can be used as a building block in your configuration. It can be found in theBUILDING BLOCKS category when filtered forLOCAL platform.

deviceTRUST® requires some simple but essential configuration steps to be performed to enable the template for your local environment. We will guide you step-by-step through simple deviceTRUST configuration steps to enable the template within your local environment.

We will perform the following steps:

  • Step 1: Prerequisites
  • Step 2: Actions

Step 1: Prerequisites

If the required deviceTRUST components (Agent, Console and License) are not yet installed, please visit the Getting Started for Local guide and complete step 1 to 4 and then continue here with step 2 below.

Step 2: Actions

The template includes an FSLogix App Masking and a Microsoft AppLocker enforcement action that actively controls access to applications, depending on the technology available. By default both actions are disabled.

Action Description Default State Customizations
Conditional Application Access - Enforcement - FSLogix App Masking Hides applications with FSLogix App Masking within the session. Deactivated You must update the following context condition with data suitable for your environment:FSLOGIX APP MASKINGReplaceENTER_YOUR_FXA_PATH_HERE with your target .fxa file path on all FSLogix App Masking tasks.Example:%ProgramFiles%\FSLogix\Apps\Rules\NotepadPlusPlus.fxaTERMINATE APPReplaceADD_PROCESS_NAME_X with your target process name on all Terminate App tasks.Example:notepad++.exe
Conditional Application Access - Enforcement - Microsoft AppLocker Denies access to applications with Microsoft AppLocker within the session. Deactivated You must update the following context condition with data suitable for your environment:MICROSOFT APPLOCKERReplaceENTER_YOUR_PATH_HERE with your target configuration on all Microsoft AppLocker tasks.Example:%PROGRAMFILES%\Notepad++\notepad++.exe

Troubleshooting

If your deviceTRUST installation or configuration does not work as expected, you can use the Troubleshooting guide to start troubleshooting.

Conditional Application Access Template