Threatlocker for Custom Applications
Team members that are in App Dev, Script, Model, or associated groups will have slightly changed Threatlocker experiences after 12/12/2024. Placement into one of these groups is "automatic" - you will be placed based on prior Threatlocker behavior. If you feel you have been misplaced, please submit a support ticket.
Team members in any of the associated groups will have a new option to Self-Approve blocked executable, script files, etc. Instead of awaiting an approval action from IT, you may self-approve which IT will review within 24 hours. This will allow the executor to immediately progress on new or changed executables.
To further expedite, members of these groups will have a directory automatically written to their workstation depending on their grouping. To date they are:
C:\MHCScripts\DevGIS
C:\MHCScripts\Model
For multi-drive devices, you may create (it is not automatically deployed):
D:\MEIScripts\
If you do not see these directories, it requires the workstation to be on the intranet at the time of boot. You may create this directory if it is missing. "Custom" applications that IT has created will whitelist a wildcard binding to these directories which will negate the need for the self-approval process.
Example: You use an application "Anaconda" to execute data models. Anaconda is a custom application that has all historical executables whitelisted, but you have cloned and changed an existing model creating a new, unique identifier. You may self-approve by executing it or, if sourced from C:\MHCSripts\Model, Threatlocker will add the new hash to the existing policy.
The Self-Approval process is as follows:
1) Run the desired executable (etc). Select Self-Approve when blocked:
2) Enter the CAPTCHA challenge. It is Case Sensitive (this step is non-configurable)
3) Your install will proceed as expected. When IT has reviewed and approved the application you'll see the "normal" approval window
Take caution here as you may already be running the application because you self-approved. Selecting Run Now may not be desired.
Please submit support requests for issues in this process, or requests to whitelist specific directories utilized by custom applications.