Authorizing and banning execution of binaries by name

You can override the applied protection by specifying the name of binaries (programs or files) to authorize or ban their execution.

When you specify a binary name to authorize its execution on a protected system, all binaries that have the same name and are present on the system or network directories are authorized to execute. Similarly, if you ban a binary by specifying its name, all binaries that have the same name are not allowed to execute.

For example,

Note

On Windows platforms, the drive letter is truncated. So, if the file path \Program Files\Google\Picasa3\setup.exe is located in any other drive instead of C, the file is still authorized to execute.