Reply to thread

Message

<blockquote data-quote="shmu26" data-source="post: 772315" data-attributes="member: 37647">ASR rule &quot;Block all Office applications from creating child processes&quot;This one can cause unpredictable behavior from the print-to-fax driver of HP printers. This driver calls rundll32 in order to talk to the printer.The block does not show in the log of &quot;View Blocked Events&quot;.It might even break the driver, but I am not sure about it, that would require further testing. I broke my printer&#039;s drivers, programs and firmware enough times yesterday. I am not happy with HP at all. Just look at it, and it breaks.Slightly off topic, but the HP printer management program does not require elevation in order to run, and it calls mshta, which is blocked by SRP sponsors -- and the&nbsp; block does not show in the log of &quot;View Blocked Events&quot;.Just reporting, for the sake of reporting...I also reported the first issue on the MS feedback hub.</blockquote>

[QUOTE="shmu26, post: 772315, member: 37647"] ASR rule "Block all Office applications from creating child processes" This one can cause unpredictable behavior from the print-to-fax driver of HP printers. This driver calls rundll32 in order to talk to the printer. The block does not show in the log of "View Blocked Events". It might even break the driver, but I am not sure about it, that would require further testing. I broke my printer's drivers, programs and firmware enough times yesterday. I am not happy with HP at all. Just look at it, and it breaks. Slightly off topic, but the HP printer management program does not require elevation in order to run, and it calls mshta, which is blocked by SRP sponsors -- and the block does not show in the log of "View Blocked Events". Just reporting, for the sake of reporting... I also reported the first issue on the MS feedback hub. [/QUOTE]

Verification