Authorize Programs

Squadra.secRMM.AuthorizePrograms (Task)

This opsmgr agent task allows you to set the secRMM "AllowedPrograms" property. The secRMM AllowedPrograms property tells secRMM which program(s) has the authority to write to a Removable Media Device. The secRMM AllowedPrograms property can also be used to completely disallow use of Removable Media. This is accomplished by specifying a value that will never match any program name within your environment. The value of the secRMM AllowedPrograms property is a semicolon separated list of programs. The format of the programs is the fully qualified path and file name (ex: C:\Program Files\MyApp\MyApp.exe).

Element properties:

TargetSquadra.secRMM.Event
AccessibilityInternal
CategorySecurityHealth
EnabledTrue
RemotableFalse
Timeout300

Member Modules:

ID Module Type TypeId RunAs 
Script WriteAction Microsoft.Windows.ScriptWriteAction Default

Source Code:

<Task ID="Squadra.secRMM.AuthorizePrograms" Accessibility="Internal" Enabled="true" Target="Squadra.secRMM.Event" Timeout="300" Remotable="true">
<Category>SecurityHealth</Category>
<WriteAction ID="Script" TypeID="Windows!Microsoft.Windows.ScriptWriteAction">
<ScriptName>AuthorizePrograms.vbs</ScriptName>
<Arguments>Null</Arguments>
<ScriptBody><Script>
Option Explicit
SetLocale("en-us")
Dim objArgs
Dim objSecRMM
Set objArgs = WScript.Arguments
Set objSecRMM = CreateObject("secRMMInterface")
If (objArgs(0) = "Null") Then
objSecRMM.SetProperty "AllowedPrograms", Null
WScript.Echo "secRMM Property AllowedPrograms has been cleared"
Else
objSecRMM.SetProperty "AllowedPrograms", objArgs(0)
WScript.Echo "secRMM Property AllowedPrograms has been set"
End If
</Script></ScriptBody>
<TimeoutSeconds>300</TimeoutSeconds>
</WriteAction>
</Task>