Configuring Policy

Policy name

(Available in Advanced Mode)

Specify a policy name.

Description

(Available in Advanced Mode)

Optionally provide a note about the policy.

Targets

• Classic Mode: Displays the name of the target group

• Advanced Mode: Click Specify Targets and select groups or endpoints to apply the policy.

  Note:

  When selecting an Active Directory group that contains child groups, visually the child groups are not selected. However, selecting the parent group automatically adds all child groups to targets.

Unauthorized Change Prevention Service

The Unauthorized Change Prevention Service regulates application behavior and verifies program trustworthiness. When the Unauthorized Change Prevention Service is enabled, Worry-Free Services can monitor system events for any unauthorized changes to the operating system, installed software, and to files, registries, and processes.

The following features require this service:

• Behavior Monitoring

• Predictive Machine Learning (for process detections)

• Device Control

• Application Control

• HTTPS Web Threat Protection

• Security Agent Self-Protection

Since monitoring all system events requires sufficient system resources, the following are the recommended best practices:

• Perform tests before deploying to the production environment.

• Check that the endpoints have sufficient system resources.