Conditional Application Access Template
This template imports a predefined action that hides or denies access to applications in the session, and can be used as a building block in your configuration. It can be found in the BUILDING BLOCKS category when filtered for LOCAL platform.
deviceTRUST® requires some simple but essential configuration steps to be performed to enable the template for your local environment. We will guide you step-by-step through simple deviceTRUST configuration steps to enable the template within your local environment.
We will perform the following steps:
Step 1: Prerequisites
If the required deviceTRUST components (Agent, Console and License) are not yet installed, please visit the Getting Started for Local guide and complete step 1 to 4 and then continue here with step 2 below.
Step 2: Actions
The template includes an FSLogix App Masking and a Microsoft AppLocker enforcement action that actively controls access to applications, depending on the technology available. By default both actions are disabled.
| Action | Description | Default State | Customizations |
|---|---|---|---|
| Conditional Application Access - Enforcement - FSLogix App Masking
|
Hides applications with FSLogix App Masking within the session.
|
Deactivated
|
You must update the following context condition with data suitable for your environment |
| FSLOGIX APP MASKING. Replace ENTER_YOUR_FXA_PATH_HERE with your target .fxa file path on all FSLogix App Masking tasks. Example: %ProgramFiles%\FSLogix\Apps\Rules\NotepadPlusPlus.fxa. | |||
| TERMINATE APP. Replace ADD_PROCESS_NAME_X with your target process name on all Terminate App tasks. Example: notepad++.exe | |||
| Conditional Application Access - Enforcement - Microsoft AppLocker
|
Denies access to applications with Microsoft AppLocker within the session.
|
Deactivated
|
You must update the following context condition with data suitable for your environment |
| MICROSOFT APPLOCKER. Replace ENTER_YOUR_PATH_HERE with your target configuration on all Microsoft AppLocker tasks. Example: %PROGRAMFILES%\Notepad++\notepad++.exe |
Troubleshooting
If your deviceTRUST installation or configuration does not work as expected, you can use the Troubleshooting guide to start troubleshooting.