Learn how to add programs and executable files in the device control lists, allowing them to run in USB even if device access is not allowed.
Do the following:
- On the OfficeScan server computer, navigate to the <Server installation folder>\PCCSRV.
- Open ofcscan.ini using a text editor.
- To add programs with read and write access to storage devices:
- Locate the following lines:
[DAC_APPROVED_LIST]
Count=x - Replace "x" with the number of programs in the program list.
- Below "Count=x", add programs by typing the following:
Item<number>=<program path and name or Digital Signature Provider>
For example:
[DAC_APPROVED_LIST]
Count=3
Item0=C:\Program Files\program.exe
Item1=?:\password.exe
Item2=Microsoft Corporation
- Locate the following lines:
- To add programs on storage devices that are allowed to execute:
- Locate the following lines:
[DAC_EXECUTABLE_LIST]
Count=x - Replace "x" with the number of programs in the program list.
- Below "Count=x", add programs by typing the following:
Item<number>=<program path and name or Digital Signature Provider>
For example:
[DAC_EXECUTABLE_LIST]
Count=3
Item0=?:\Installer\Setup.exe
Item1=E:\*.exe
Item2=Trend Micro, Inc.
- Locate the following lines:
- Save and close the ofcscan.ini file.
- Open the OfficeScan web console and go to Networked Computers > Global Client Settings.
- Click Save to deploy the program lists to all clients.