Changing application rights for trust groups and groups of applications
The optimal application rights for different trust groups are created by default. The settings of rights for application groups that are in a trust group inherit values from the settings of the trust group rights. You can edit the preset rights of trust groups and rights of application groups.
To edit the rights of a trust group or the rights of an application group:
- In the lower part of the main application window, click the
button. - In the application settings window, select Protection → Advanced Threat Protection → Host Intrusion Prevention.
- Click the Manage applications button.
This opens the list of installed applications.
- Select the necessary trust group or application group.
- From the context menu of a trust group or an application group, select Details and rules.
This opens the properties of a trust group or an application group.
- Do one of the following:
- To edit trust group rights or application group rights that govern the rights of the trust group or application group to access the operating system registry, user files, and application settings, select the Files and system registry tab.
- To edit trust group rights or application group rights that govern the rights of the trust group or application group to access operating system processes and objects, select the Rights tab.
- For the required resource, in the column of the corresponding action, right-click to open the context menu.
- From the context menu, select the required item.
- Inherit.
- Allow.
- Block.
- Log events
If you are editing trust group control rules, the Inherit item is not available.
- Save your changes.