Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 707068" data-attributes="member: 32260">Actually, the user in most cases can simply press the left green button to partially unlock SRP restrictions. This does not require log-off and SRP Default Security Level is set to Unrestricted. After installing applications, the user simply should press the left green button again to reactivate restrictions. .
If the other restrictions have to be fully deactivated then after pressing green buttons, log-off is required.
.I am thinking about a simple GUI as follows:Lock / Allow EXE / Unlock / ConfigureThe &quot;Lock&quot; will activate predefined options.The &quot;Allow EXE&quot; will activate recommended options but EXE files will be allowed and Userprofile Temp folder will be whitelisted for all files.The &#039;Unlock&quot; will deactivate all restrictions except SMB.The &quot;Configure&quot; will execute Hard_Configurator..All options require log-off to fully apply changes..Yet, after &quot;Unlock&quot; the user may not log-off because many SRP restrictions will be deactivated (Default Security Level = Unrestricted). This will not deactivate other SRP features like &lt;Enforcement&gt;, &lt;Block Sponsors&gt; or &lt;Protect Shortcuts&gt; because those options require log-off. But those options will hardly block something when &lt;Default Security Level&gt; is set to Unrestricted.</blockquote>

[QUOTE="Andy Ful, post: 707068, member: 32260"] Actually, the user in most cases can simply press the [B][COLOR=#00b359]left green button[/COLOR][/B] to partially unlock SRP restrictions. This does not require log-off and SRP Default Security Level is set to Unrestricted. After installing applications, the user simply should press the[FONT=Roboto][COLOR=rgb(29, 33, 41)] [/COLOR][/FONT][B][B][COLOR=rgb(29, 33, 41)][COLOR=#00b359]left green button [/COLOR][/COLOR][/B][/B][FONT=Arial][SIZE=4][COLOR=rgb(29, 33, 41)]again to reactivate restrictions. [/COLOR][/SIZE][/FONT] [LEFT][FONT=Roboto][COLOR=rgb(29, 33, 41)].[/COLOR][/FONT] [FONT=Arial][SIZE=4][B]If the other restrictions have to be fully deactivated then after pressing green buttons, log-off is required.[/B][/SIZE][/FONT] [B][FONT=Arial].[/FONT][/B][/LEFT] I am thinking about a simple GUI as follows: [B]Lock / Allow EXE / Unlock / Configure[/B] The "[B]Lock[/B]" will activate predefined options. The "[B]Allow EXE[/B]" will activate recommended options but EXE files will be allowed and Userprofile Temp folder will be whitelisted for all files. The '[B]Unlock[/B]" will deactivate all restrictions except SMB. The "[B]Configure[/B]" will execute Hard_Configurator. . All options require log-off to fully apply changes. . Yet, after "Unlock" the user may not log-off because many SRP restrictions will be deactivated (Default Security Level = Unrestricted). This will not deactivate other SRP features like <Enforcement>, <Block Sponsors> or <Protect Shortcuts> because those options require log-off. But those options will hardly block something when <Default Security Level> is set to Unrestricted. [/QUOTE]

Verification