Available only in Safeguard Privilege Manager for Windows Professional Edition and Professional Evaluation Edition.
Use the By Path to Script File rule to elevate or decrease privileges for processes that start from a script file.
To create a By Path to Script File rule using the Create Rule Wizard
-
Open the Create Rule Wizard. For more information, see Using the Create Rule Wizard.
-
Set the absolute or relative path to one of the following types of script files:
-
Command Prompt: .cmd
-
Batch File: .bat
-
JavaScript: .js
-
VBScript: .vbs
-
PowerShell: .ps1
-
Perl: .pl
Wildcards are supported and you can use Browse to locate the path.
-
-
Fill in these optional fields, as necessary:
-
Publisher: Limit Elevation to files signed with the digital certificate of a publisher. Enter the exact name or use Browse to locate it.
This field is not supported for .pl, .cmd, and .bat files.
-
File Hash: Click Browse to locate the file and create a unique cryptographic hash that limits Elevation to files that match it. This ensures that the rule will not apply to dangerous content that is similarly named and will help prevent security issues.
-
Apply settings to child processes: Ensure that child processes triggered by the rule will not fail due to lack of privileges. This check box is enabled by default.
-
User’s context will be used to resolve system and resource access: Ensure that the Client uses the target's user environment to resolve file and registry access. This might be required to resolve drive mappings, and also if the rule specifies the publisher, version, or file hash for the target process running from a network location.
-
-
Define whether the rule will be user-based or computer-based.
-
User Policy: Select this option to apply the rule to the user logged in to the computer. This option corresponds to the User Configuration node of the Group Policy Management Editor and is the default policy for all editions of Safeguard Privilege Manager for Windows.
-
Computer Policy: Select this option to apply the rule to a computer regardless of the user logged in. This option corresponds to the Computer Configuration node of the Group Policy Management Editor.
NOTE: This option is available only in Safeguard Privilege Manager for Windows Professional Edition and Professional Evaluation Edition.
-
-
Complete the Privileges (see Granting/denying privileges (Privilege Elevation Rules only)) and Integrity (see Differentiating security levels (Privilege Elevation Rules only)) tabs to modify the rule.
-
Click Finish to quit the wizard.
-
The rule will be named after the script file.