Discovery

The Discovery policy contains Workstyles, Application Groups, and messages to allow the discovery of applications that need administrative privileges to execute. This must be applied to administrator users and includes a preconfigured exclusion group (false positives) maintained by BeyondTrust.

This template policy contains the following configurations:

Workstyles

  • Discovery Workstyle

Application Groups

  • (Default Rule) Any Application
  • (Default Rule) Any UAC Prompts
  • Approved Standard User Apps
  • Passive - All Users & Apps

Messages

  • Allow Message (Yes / No)