Quantcast
Channel: Symantec Connect
Viewing all articles
Browse latest Browse all 22530

SWV 7.5.522 Isolation Rules

$
0
0
I need a solution

Has anyone tried using granular isolation rules in the SWV 7.5.522 client? I'm not able to get them to work at all but doing the same thing on 6.1 SP8 client and it works. I've tried adding the key IsolationRules under HLM\System\CurrentControlSet\Services\FSLX\Parameters\FSL\%magicnumber% inside the layer and outside the layer and neither work. I've also tried adding exclude entries and that doesn't seem to work either. I fired up ProcMon and ran a reg query from the layer and I don't even see that value being queried.

Here's an example of one of my rules I was using for testing:

*\reg.exe    edcb0ff0-bbe8-4ea9-a013-e37840e54b20    0x0002    \REGISTRY\USER\S-1-5-18\Software\Classes\CLSID\{CAFEEFAC*    *    BASE

Then when I run reg query from the layer I'm returning all the keys.

SVSCmd.exe "Firefox 19.02" exec -p "c:\windows\system32\reg.exe query hku\s-1-5-18\software\classes\clsid"

........Snip.........

HKEY_USERS\s-1-5-18\software\classes\clsid\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}
HKEY_USERS\s-1-5-18\software\classes\clsid\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}
HKEY_USERS\s-1-5-18\software\classes\clsid\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}
HKEY_USERS\s-1-5-18\software\classes\clsid\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

.........Snip.......

I've tried it on 2 different workstations, both running Windows 7 Enterprise SP1 x64 with SWV 7.5.522.

 


Viewing all articles
Browse latest Browse all 22530

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>