Add and remove components from the allow list

Add components to the allow list.

sadmin solidify [<arguments> <components>]

After the initial allow list is created, execution is blocked for the components that are not included in the allow list. If needed, add more components to the allow list.

Remove all components from the allow list.

sadmin unsolidify

Remove all components from the allow list using this command. When you remove components from the allow list, they are no longer protected by Application Control.

Remove selected components from the allow list.

sadmin unsolidify [<arguments> <components>]

Specify the components that you want to remove from the allow list.

File name

Add files to the allow list. For example,

sadmin solidify filename1 ... filenameN

Remove files from the allow list. For example,

sadmin unsolidify filename1 ... filenameN

Directory name

Add all supported files (recursively) under specified directories to the allow list. For example,

sadmin solidify directoryname1 ... directorynameN

Remove all supported files in one or more directories from the allow list. For example,

sadmin unsolidify directoryname1 ... directorynameN

Volume name

Add all supported files (recursively) under specified system volumes to the allow list. For example,

sadmin solidify volumename1 ... volumenameN

Remove all supported files in one or more system volumes from the allow list. For example,

sadmin unsolidify volumename1 ... volumenameN

File name

Directory name

Volume name

Optionally, you can specify supported arguments with the command.

Here are the arguments descriptions: