System LockDown SEP 14

System LockDown in Whitelist mode not working as expected during testing with

Added exception under Application File Lists

%LOCALAPPDATA%\GoToMeeting\*\*

Event still shows as BLOCKED by LOCKDOWN after policy update

Client Control Log

10/5/2017 7:34:00 AM 

1 

Block 

Test Mode 

System Lockdown - Caller MD5=36f670d89040709013f6a460176767ec - Target Arguments="" 

Create Process 

LockDown 

10.10.18.134 

1796 

C:\Windows\System32\svchost.exe SCSI\Disk&Ven_ATA&...

C:\Users\BwwLabUser\AppData\Local\GoToMeeting\7716\g2mupdate.exe 

31,808 Bytes 

SYSTEM 

BwwLab 

Default