Reply to thread

Message

<blockquote data-quote="ErzCrz" data-source="post: 900490" data-attributes="member: 81799">Most programs don&#039;t install in user-space but I always check &quot;Advanced options&quot; when installing anything new. You can swap over to the Recommended_Strict configuration profile which won&#039;t allow user-space executable to run and therefore you&#039;ll need manually whitelist them. I had to do that with Discord in versions prior to 5.x when the change was made to allow those by default. Anyway, I would always check where things are being installed via the installer or switch to the strict profile.From the manual:&quot; Updating from previous versions. Because of several important changes in version 5.0.1.0, it is recommended (just after update) to load one of the predefined setting profiles or simply apply first the Recommended Settings and next adjust the restrictions. This will properly activate the new features. The whitelisted entries will not be changed, except adjusting the Unrestricted and Disallowed rules for EXE (TMP) and MSI files. If the user wants to globally allow EXE (TMP) and MSI files, then the profile &quot;Windows_*_Basic_Recommended_Settings.hdc&quot; can be applied (* denotes the Windows version). This setting profile requires an antivirus with strong proactive protection for EXE and MSI files. If the user wants to block also EXE (TMP) and MSI files in UserSpace, then the profile &quot;Windows_*_Strict_Recommended_Settings.hdc&quot; can be applied. &quot;</blockquote>

[QUOTE="ErzCrz, post: 900490, member: 81799"] Most programs don't install in user-space but I always check "Advanced options" when installing anything new. You can swap over to the Recommended_Strict configuration profile which won't allow user-space executable to run and therefore you'll need manually whitelist them. I had to do that with Discord in versions prior to 5.x when the change was made to allow those by default. Anyway, I would always check where things are being installed via the installer or switch to the strict profile. From the manual: " Updating from previous versions. Because of several important changes in version 5.0.1.0, it is recommended (just after update) to load one of the predefined setting profiles or simply apply first the Recommended Settings and next adjust the restrictions. This will properly activate the new features. The whitelisted entries will not be changed, except adjusting the Unrestricted and Disallowed rules for EXE (TMP) and MSI files. [B]If the user wants to globally allow EXE (TMP) and MSI files, then the profile "Windows_*_Basic_Recommended_Settings.hdc" can be applied[/B] (* denotes the Windows version). This setting profile requires an antivirus with strong proactive protection for EXE and MSI files. [B]If the user wants to block also EXE (TMP) and MSI files in UserSpace, then the profile "Windows_*_Strict_Recommended_Settings.hdc" can be applied. [/B]" [/QUOTE]

Verification