When you add directories as trusted directories, systems can run any software present in these directories.
On the ePO - On-prem console, create or modify an Application Control policy or rule group.
On the Rule Groups tab, locate your Group Name and under Actions, click Edit.
On the Directories tab, click Add.
Enter the location of the directory.
Select Include or Exclude.
Use Exclude to exclude a specific folder or subfolder within a trusted directory.
Click OK.