File Groups
With Block-IT (AAC), program
executables are organized into
“file groups”, enabling
administrators to grant or deny
access to entire software
suites, not just individual
executables (figure 2). The file
groups can be associated with
all the Terminal Servers or a
specific silo in the farm.
Additional settings such as
application termination, hash
checking, and full path checking
can also be configured at the
file group level (more on this
later). Finally, for each
individual executable in the
file group, a unique hash is
computed and stored in the
management database (figure 3).
For informational purposes, a
hash can be likened to a
fingerprint; it is used to
verify the authenticity of a
program executable at start
time.
Figure 2 - Program
executables are organized into
"file groups", enabling
administrators to grant or deny
access to entire software
suites, not just individual
executables
Figure 3 - For each
individual executable in the
file group, a unique hash is
computed and stored in the
database.
Next: Block-IT - File Group Assignment & Execution Schedule
