I have recently implemented Application Control and two common programs that are essentially part of Windows keep on coming up. On Screen Keyboard osk.exe Deployment Image Servicing and Management (DISM) DismCore.dll Unfortunately, I cannot find the category where I'd like to exclude these files. Can anyone point me in the right direction? It's probably something simple I'm missing.

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Application Control Exclusion of osk.exe and dismcore.dll ?

I have recently implemented Application Control and two common programs that are essentially part of Windows keep on coming up.

On Screen Keyboard osk.exe
Deployment Image Servicing and Management (DISM) DismCore.dll

Unfortunately, I cannot find the category where I'd like to exclude these files. Can anyone point me in the right direction? It's probably something simple I'm missing.

This thread was automatically locked due to age.

Parents

0 jak over 9 years ago

Hi,

So:
www.sophos.com/.../On-Screen Keyboard.aspx
and
www.sophos.com/.../Deployment Image Servicing and Management.aspx

are the two items detected. Sophos Labs give them the identifiable names:

"Deployment Image Servicing and Management"
"On-Screen Keyboard"

In the Application Control policy (Authorization tab) linked to the SEC groups these computers are in, you should be able to move the above items to the list on the left.

From the details on the website, "On-Screen Keyboard" is a System tool so you should find it under that category. The website doesn't say what "Deployment Image Servicing and Management" is in but you should be able to find it by that name. I don't have SEC at hand to check.

General AppC help:
docs.sophos.com/.../index.htm

Forum posts:

http://community.sophos.com/products/endpoint-security-control/f/3/t/9962

and

http://community.sophos.com/products/endpoint-security-control/f/3/p/343/16276#16276
suggest they are both under the System tool category,

Regards,
Jak
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 jak over 9 years ago

Hi,

So:
www.sophos.com/.../On-Screen Keyboard.aspx
and
www.sophos.com/.../Deployment Image Servicing and Management.aspx

are the two items detected. Sophos Labs give them the identifiable names:

"Deployment Image Servicing and Management"
"On-Screen Keyboard"

In the Application Control policy (Authorization tab) linked to the SEC groups these computers are in, you should be able to move the above items to the list on the left.

From the details on the website, "On-Screen Keyboard" is a System tool so you should find it under that category. The website doesn't say what "Deployment Image Servicing and Management" is in but you should be able to find it by that name. I don't have SEC at hand to check.

General AppC help:
docs.sophos.com/.../index.htm

Forum posts:

http://community.sophos.com/products/endpoint-security-control/f/3/t/9962

and

http://community.sophos.com/products/endpoint-security-control/f/3/p/343/16276#16276
suggest they are both under the System tool category,

Regards,
Jak
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data