Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 795937" data-attributes="member: 32260">Almost all of the above can be accomplished by applying Avast profile in H_C:<ol>
<li data-xf-list-type="ol">The DLL and EXE files are allowed (MSU also because it is not blocked by H_C file extension list).</li>
<li data-xf-list-type="ol">The shortcuts (LNK files) are allowed on the Desktop and Start Menu, but blocked in the UserSpace (can be bypassed by administrator).</li>
<li data-xf-list-type="ol">You can use &quot;Run as administrator&quot; to run MSI installers (and bypass SRP) - that will be rarely used, because most installers are just EXE files.</li>
<li data-xf-list-type="ol">VBScript and JScript scripts are blocked in the UserSpace (can be whitelisted or bypassed by administrator).</li>
<li data-xf-list-type="ol">PowerShell scripts are blocked (also as administrator), and PowerShell commands are restricted by Constrained Language mode (can be bypassed by administrator).</li>
</ol>Other settings for web browsers and media players are not available in H_C, because people use several applications for that. This would require another application.<s>The only problem will be when applying &#039;UAC deny elevation of unsigned&#039; (ValidateAdminCodeSignatures) which will block RunAsSmartScreen. In this case, two options must be reconfigured:</s><s>&lt;Run As SmartScreen&gt; = OFF</s><s>&lt;Hide &#039;Run as administrator&gt; = OFF</s>By, the way - what problems did you have with Free Office? I am using Softmaker Office Standard without issues - even H_C manual is an exported DOCX file to PDF, all made in Softmaker Office.Edit.I checked the Avast profile and it applies the reconfigured options already.</blockquote>

[QUOTE="Andy Ful, post: 795937, member: 32260"] Almost all of the above can be accomplished by applying Avast profile in H_C: [LIST=1] [*]The DLL and EXE files are allowed (MSU also because it is not blocked by H_C file extension list). [*]The shortcuts (LNK files) are allowed on the Desktop and Start Menu, but blocked in the UserSpace (can be bypassed by administrator). [*]You can use "Run as administrator" to run MSI installers (and bypass SRP) - that will be rarely used, because most installers are just EXE files. [*]VBScript and JScript scripts are blocked in the UserSpace (can be whitelisted or bypassed by administrator). [*]PowerShell scripts are blocked (also as administrator), and PowerShell commands are restricted by Constrained Language mode (can be bypassed by administrator). [/LIST] Other settings for web browsers and media players are not available in H_C, because people use several applications for that. This would require another application. [S]The only problem will be when applying 'UAC deny elevation of unsigned' ([I]ValidateAdminCodeSignatures[/I]) which will block RunAsSmartScreen. In this case, two options must be reconfigured: <Run As SmartScreen> = OFF <Hide 'Run as administrator> = OFF[/S] By, the way - what problems did you have with Free Office? I am using Softmaker Office Standard without issues - even H_C manual is an exported DOCX file to PDF, all made in Softmaker Office. Edit. I checked the Avast profile and it applies the reconfigured options already. [/QUOTE]

Verification