Application Control and Change Control

Application Control blocks unauthorized executables on servers, corporate desktops, and fixed-function devices. Change Control monitors and prevents changes to the file system. Application Control uses dynamic allow listing to guarantee that only trusted applications run on servers, devices, and desktops. It eliminates the need for IT administrators to manually maintain lists of approved applications. It guarantees protection without impacting productivity. With Application Control, you can prevent malicious, untrusted, or unwanted software from being executed, automatically identify trusted software and grant it authorization to run, and block users from introducing software that poses a risk to your company.

Change Control allows you to write-protect and read-protect critical files from unauthorized tampering. You can also define trusted programs or users to allow updates to protected files and registry keys. A change is allowed only if it's applied according to the software policies.

With Change Control, you can detect, track, and validate changes in real time, prevent changes using protection rules, and enforce approved change policies.