Highlighted
Absent Member.
Absent Member.
2576 views

Application Control: No execution .lnk?

Hi,

I like application control policy to deny execution for apps.
I have a problem with apps. For Example: SKYPE

Skype is creating an automatic shortcut into startmenu (the installer does): Skype.lnk
- Target is already filled in, and can't modify it.
- Size is much bigger than an manual created shortcut.
That's another shortcut than what you can make by yourself.
- You can specify target. for ex. C:\Program Files\Skype\phone\skype.exe
- Size is very small.

If i block (no execution): "Skype.exe" then.

Main executable:
Target: C:\Program Files\Skype\phone\skype.exe is = blocked perfectly

Manual created shortcut (.lnk):
Target: C:\Program Files\Skype\phone\skype.exe = blocked perfectly

Automatic created shortcut (.lnk):
Target: Skype 5.0
Gives me a repair of the msi, (please wait while Windows configures Skype 5.0) and ends with: The feature you are trying to use is on a network resource that is unavailable. (msiexec is searching for SkypeSetup.msi)

Do i need to also include the Skype.lnk to restrict the access and get rid of the msi repair?

(i have test that, and that is working. It's not give a message that you don't have access as it is doing for the .exe file , but ok)
Can't find anything in the documentation about the (installer installed) .lnk files

Regards,

Tristan.






Do i need to seperate
Labels (2)
0 Likes
8 Replies
Highlighted
Absent Member.
Absent Member.

Re: Application Control: No execution .lnk?

floort,

It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.

Has your problem been resolved? If not, you might try one of the following options:

- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)

Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php

If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.

Good luck!

Your Novell Product Support Forums Team
http://forums.novell.com/

0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Application Control: No execution .lnk?

Is this the way it should be or not?
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Application Control: No execution .lnk?

Still hoping for some information.
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Application Control: No execution .lnk?

uhhhhh RETRY! :)......

Looks like this is a boring question.... no one can help me with this ? 🙂
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Application Control: No execution .lnk?

Hi Tristan,

Yes, you can add the .lnk file in the list of Skype files to have No
Execution. When you double click this shortcut on the desktop, it
prevents Skype from being launched.

Ideally, you would distribute this app via ZCM where you can then remove
the shortcut that gets created on the Desktop through a File Removal action.

Cheers,
Chris

Chris Gacesa
Senior Product Manager
Novell - ZENworks
CGacesa@novell.com (Email)
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Application Control: No execution .lnk?

cgacesa;2130748 wrote:
Hi Tristan,

Yes, you can add the .lnk file in the list of Skype files to have No
Execution. When you double click this shortcut on the desktop, it
prevents Skype from being launched.

Ideally, you would distribute this app via ZCM where you can then remove
the shortcut that gets created on the Desktop through a File Removal action.

Cheers,
Chris

Chris Gacesa
Senior Product Manager
Novell - ZENworks
CGacesa@novell.com (Email)


Chris, Thanks for your answer.

Ofcourse i normally deploy msi's without shortcuts. But i'm wondering what's the different here between the shortcut that skype is creating (automatic shortcut), and the manual shortcut (.lnk to the .exe file).
The automatic one gives me a msiexec repair screen. While i thought i start an .lnk that is an link to the .exe file , so i will get an block!, but i get an msi repair :S
What's the technic behind that.
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Application Control: No execution .lnk?

Tristan,

I am getting the same behaviour as you with the Skype created shortcut
on the desktop where it launches the MSI Installer. In short, I really
don't know. I did find this on the Skype community forum though, "The
original shortcut created by default by Skype installation is a so
called advertised shortcut, which actually points to the msi-file and
not directly to the exe-file."

Chris

Chris Gacesa
Senior Product Manager
Novell - ZENworks
CGacesa@novell.com (Email)
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Application Control: No execution .lnk?

Chris,

That explains something. Good work.
So normally this is not the case, but i think i have found an example that is an exception.
I will add .lnk files if needed, but normally only the .exe in combination with NAL used icons. (Remove .lnk files during installation)
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.