Policy User Experience

Display the system tray icon

The Endpoint Application Control system tray icon () can display notifications, allow the user to request access to applications, and allow the user to manually update Endpoint Application Control settings and logs.

• Select Yes to display the icon in matched users' Windows system trays.

• Select No to hide the icon.

Display notification popups

Displaying notifications to some users may be inappropriate. For example, users of special-purpose endpoints such as ATMs, medical devices, kiosks, and gas pumps may be confused by notifications and related requests for interaction.

Figure 1. Endpoint Application Control Block Notification Example

Decide if it is appropriate to display notifications to users.

• Select Yes to display Endpoint Application Control notifications to matched users.

  Note:

  If the policy matches the currently logged on user account, the system tray icon displays events triggered by the matched user account. If the user executes applications using "Run as administrator" or the System account, the system tray icon does not display events to the end user.

• Select No to prevent the display of notifications and disable related user-interactions.

Important:

After Endpoint Application Control blocks or delays an application start using the kernel-level method, Windows may display the following notification to end-users:

Figure 2. Windows Block Notification

Endpoint Application Control is unable to hide this notification. You can avoid this notification by applying user-level blocking instead.

See About Blocking Methods.

Generate a new inventory

Endpoints generate inventories to track new and deleted applications. Endpoint Application Control periodically collects application inventories from endpoints.

Select a time interval, such as daily or a weekly.

The default setting for a new policy is Every 1 week on Monday.

Start time

Endpoint Application Control periodically collects application inventories from endpoints.

Select a start time for the inventory scan.

The default setting for a new policy is 00:00.