Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Configuring Application Control in Worry-Free Business Security Services (WFBS-SVC)

    • Updated:
    • 18 Aug 2017
    • Product/Version:
    • Worry-Free Business Security Services 6.2
    • Platform:
    • Windows 10 32-bit
    • Windows 10 64-bit
    • Windows 2008 Server R2
    • Windows 2008 Small Business Server
    • Windows 2008 Standard
    • Windows 7 32-Bit
    • Windows Vista 32-bit
Summary

You can use the Trend Micro Certified Safe Software List or add specific paths to block applications from executing on endpoints.

Follow the steps in this article to configure Application Control in WFBS-SVC.

Details
Public
  1. Navigate to Devices.
  2. Select a desktop or server group.
  3. Configure Policy.
  4. Click Windows.

    Click Windows

    Click image to enlarge

  5. Click Application Control.

    Click Application Control

    Click image to enlarge

  6. Enable Application Control.

    Select Enable Application Control

    Click image to enlarge

  7. Under Blocked Application List, select applications to block from the Trend Micro Certified Safe Software List.

    1. Click Manage Applications.

      Click Manage Applications

      Click image to enlarge

    2. On the left pane, select a category.

      Select a category

      Click image to enlarge

    3. On the right pane, select the applications to block then click OK.

      WFBS-SVC adds the applications to the Blocked Application List.

      Select applications to block

      Click image to enlarge

     
    • To block all applications within a category, select the Application column heading.
    • Trend Micro updates the Trend Micro Certified Safe Software List periodically to include new applications. To automatically block these new applications, select a category and enable Block new applications added to the %CATEGORY% category.
  8. Under Blocked Path List, configure the programs to block from executing on the endpoints.

     
    To apply the settings to Windows server platforms, go to Configure Policy > Agent Privileges > Agent Control and configure the Unauthorized Change Prevention Service for Desktops and servers.
    1. Click Add File/Folder Path.

      Click Add File Folder Path

      Click image to enlarge

    2. Specify the file or folder path to block then click Add.

      Add File_Folder to block

      Click image to enlarge

      For Example:

      • C:\Program Files\Skype\Phone\Skype.exe
      • C:\Program Files\Adobe

      The following table lists the paths that you cannot use.

      Path
      $programdir$\Trend Micro\Client Server Security Agent
      $programdirx86$\Trend Micro\Client Server Security Agent
      C:\Program Files\Trend Micro\Client Server Security Agent
      C:\Program Files (x86)\Trend Micro\Client Server Security Agent
      $programdir$\Trend Micro\BM
      $programdirx86$\Trend Micro\BM
      C:\Program Files\Trend Micro\BM
      C:\Program Files (x86)\Trend Micro\BM
      $programdir$\Trend Micro\WFBSSUpdater
      $programdirx86$\Trend Micro\WFBSSUpdater
      C:\Program Files\Trend Micro\WFBSSUpdater
      C:\Program Files (x86)\Trend Micro\WFBSSUpdater
      $programdir$\Trend Micro
      $programdirx86$\Trend Micro
      C:\Program Files\Trend Micro
      C:\Program Files (x86)\Trend Micro
       
      Wildcards are not supported.
    3. Optionally provide a note regarding the reason to block the program.
    4. Click Add.

      WFBS-SVC adds the path to the Blocked Path List.

  9. Click Save.

    Click Save

    Click image to enlarge

The following table lists the environment variables you can use when adding a file or folder path to the list.

Environment VariableSample EntryEquivalent Path
$allappdata$$allappdata$\testC:\Documents and Settings\All Users\Application Data\test
$allprograms$$allprograms$\testC:\Documents and Settings\All Users\Start Menu\Programs\test
$rootdir$$rootdir$\tempC:\temp
$programdir$$programdir$\TestC:\Program Files\Test
$programdirx86$$programdirx86$\TestC:\Program Files (x86)\Test
$systemdir$$systemdir$\tempC:\Windows\System32\temp
$systemdirx86$$systemdirx86$\tempC:\Windows\SysWOW64\temp
$tempdir$$tempdir$\testC:\Windows\Temp\test
$windir$$windir$\testC:\Windows\test
$userprofile$$userprofile$\testC:\Documents and Settings\* (For Windows XP)
C:\Users\* (For Windows Vista or newer)
Premium
Internal
Rating:
Category:
Configure; Troubleshoot; SPEC
Solution Id:
1118028
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.