How can I disable Applications from running on startup with HIPS?
- Thread starter Xeno1234
- Start date
Please provide comments and solutions that are helpful to the author of this topic.
- Jun 12, 2023
- 699
For a bit of Sandboxing, I have somewhat hardened HIPS. Firstly, I utilize untrusted for anything that cant have a trust group determined, and then I also put anything I trust into Low Restricted to prevent it from doing anything malicious. I want to prevent things from running on startup via HIPS. How do I do that?
- Apr 21, 2016
- 3,468
To prevent applications from running on startup through HIPS, you can create a rule in your HIPS configuration to block startup items. Here are the steps to create a rule:
1. Open the Kaspersky application and go to Settings -> Advanced Settings -> Threats and Exclusions -> Host Intrusion Prevention System (HIPS).
2. Click on the "Application Privilege Control" tab, and then click "Settings."
3. In the Settings window, click on the "Rules for application startup" tab.
4. Click "Add," and then choose "Block" as the rule action.
5. Enter a name for the rule (e.g. "Block startup items"), and then click "Next."
6. On the "Conditions" page, select "Application startup" as the trigger type.
7. Under "Rules," select "Startup task" and "Startup registry key."
8. Click "Next," and then choose the applications or groups of applications you want to block from starting up.
9. Click "Finish" to save the rule.
After creating this rule, any applications that match the conditions you defined will be blocked from starting up on your computer.
1. Open the Kaspersky application and go to Settings -> Advanced Settings -> Threats and Exclusions -> Host Intrusion Prevention System (HIPS).
2. Click on the "Application Privilege Control" tab, and then click "Settings."
3. In the Settings window, click on the "Rules for application startup" tab.
4. Click "Add," and then choose "Block" as the rule action.
5. Enter a name for the rule (e.g. "Block startup items"), and then click "Next."
6. On the "Conditions" page, select "Application startup" as the trigger type.
7. Under "Rules," select "Startup task" and "Startup registry key."
8. Click "Next," and then choose the applications or groups of applications you want to block from starting up.
9. Click "Finish" to save the rule.
After creating this rule, any applications that match the conditions you defined will be blocked from starting up on your computer.
- Apr 28, 2015
- 8,675
Just go to Security -> Intrusion Prevention -> Manage Applications:
Select the application and set to Blocked in Start column.
Select the application and set to Blocked in Start column.
- Jun 12, 2023
- 699
Specifically for one trust group. Like all low restricted applications not being able to run on startup of system or all high restricted ones, etc.
Similar threads
