Safeguard Community

Forum preventing process execution in a windows server

preventing process execution in a windows server

dario guastella 2 months ago

Is it possible to prevent some specific execution of some specific tools in a windows server with CONTENT POLICIES?

the specific needed is to prevent for ex to digit regedit or mstsc

is it possible to do this implementation for a windows server using CONTENT POLICIES? Or in a different way?

0 Tawfiq.Ahmad 2 months ago

Hi Dario,

The RDP sessions can use the Content Policies (Which is linked in the Channel Policy to the Drawing channel) to detect Windows Titles and take an action such as terminate the session if the Windows Title that appears in RDP session matches the string that is defined in the Content policy.

Reference to Windows Title Detection can be found here:

https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-sessions/7.4/administration-guide/58

Thanks!
Cancel
Up 0 Down

Reply

Verify Answer

Cancel