Program blocking settings

To increase the security of the Windows computers on the network, you can prevent the use of programs you consider dangerous or not compatible with the work of your organization. There are many reasons why you might want to prevent the execution of certain programs:

  • Programs which, due to the way they run, use too much bandwidth or establish too many connections, negatively impacting company connectivity if run simultaneously by multiple users.

  • Programs that enable users to access contents that might contain security threats.

  • Programs that enable users to access contents not related to company activity and which might affect user performance.

For additional information about the program blocking module, see:

Creating and managing settings profiles: Information about how to create, edit, delete, or assign settings profiles to the computers on your network.

Accessing, controlling, and monitoring the management console: Managing user accounts and assigning permissions.
Managing lists: Information about how to manage lists.

Program blocking settings

Accessing the settings

  • From the top menu, select Settings. From the side menu, select Program blocking.

  • Click the Add button. The Program blocking settings page opens.

You can only assign program blocking settings to Windows workstations and servers.

Required permissions

Permission Access type

Configure program blocking

Create, edit, delete, copy, or assign program blocking settings profiles.

View program blocking settings

View the program blocking settings profiles defined.

Permissions required to access the program blocking settings

Program blocking settings options

To create a new settings profile or edit an existing profile, enter this information:

Field Description

Names of the programs to block

Names of the executable files (EXE files) that you want Advanced EPDR to prevent from running. You can paste a list of file names separated by line breaks. Wildcards are not supported.

MD5 or SHA-256 codes of the programs to block

MD5 or SHA-256 codes of the executable files (EXE files) that you want Advanced EPDR to prevent from running. You can paste a list of MD5 or SHA-256 codes separated by line breaks.

Notify computer users about blocked applications

Specify a custom message to notify users that the security solution blocked a file. The Advanced EPDR agent shows a pop-up message on user computers when they try to run a blocked application.

Configuring a program blocking security policy

Do not block operating system programs or components that are necessary to run user programs correctly.
Advanced EPDR does not block any of its programs or modules to make sure the security solution works correctly.