0

我的 AppLocker 规则阻止防病毒（McAfee、Symantec、Kaspersky）setup.exe 安装。我编写了从 windows 目录安装 exe 文件的规则。但只有防病毒软件被阻止，除了其他 exe 文件正在安装，如 chrome.exe、adobereader.exe。我无法从 windows 目录安装防病毒软件。谁能告诉我这个问题的解决方案。我的代码

<FilePathRule Id="XXXXXX" Name="%OSDRIVE%\*" Description="" UserOrGroupSid="S-1-1-0" Action="Deny">
  <Conditions>
    <FilePathCondition Path="%OSDRIVE%\*" />
  </Conditions>
  
  <Exceptions>
    <FilePathCondition Path="%HOT%\installer\*" />
    <FilePathCondition Path="%HOT%\upgrader\*" />
    <FilePathCondition Path="%OSDRIVE%\*\tracerpt.exe" />  
    <FilePathCondition Path="%WINDIR%\*" />
    <FilePublisherCondition PublisherName="O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US" ProductName="MICROSOFT VISUAL C++ 2015 REDISTRIBUTABLE (X64) - 14.0.24212" BinaryName="*">
      <BinaryVersionRange LowSection="*" HighSection="*" />
    </FilePublisherCondition>
    <FilePublisherCondition PublisherName="O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US" ProductName="MICROSOFT VISUAL C++ 2015 REDISTRIBUTABLE (X86) - 14.0.24212" BinaryName="*">
      <BinaryVersionRange LowSection="*" HighSection="*" />
    </FilePublisherCondition>
  </Exceptions>
</FilePathRule>

谢谢，

4

0 回答 0