Application Groups

Application Groups are used to define logical groupings of applications.

Application Groups are assigned to Workstyles, so you must define Application Groups for all of the applications you want to assign to a Workstyle.

Create Application Groups

To create an Application Group:

  1. Navigate to Endpoint Privilege Management Settings > Windows > Application Groups.
  2. Right-click Application Groups and click New Application Group. This creates an Application Group with the default name Application Group x, where x increments numerically.
  3. Right-click the new Application Group and click Rename. Enter the new name you want and press Return to save the new Application Group.

View or Edit the Properties of an Application Group

Each Application Group has a name, an optional description, and can be hidden from the policy navigation tree. You can edit these in the properties for the Application Group.

To view the properties of an Application Group:

  1. Navigate to Endpoint Privilege Management Settings > Windows > Application Groups.
  2. Right-click the Application Group and select Properties to view its properties. Enter or change the description and click OK to save the new properties.

You can also choose to hide the Application Group in this menu by checking the Hidden box.

For more information, please see Show Hidden Groups.

Delete an Application Group

Application Groups are usually mapped to one or more Application Rule in a Workstyle. If you attempt to delete an Application Rule that is mapped to an Application Group, you are notified of this before you continue. If you continue to delete the Application Group, the associated Application Rule in the Workstyle is also deleted.

To delete an Application Group:

  1. Navigate to Endpoint Privilege Management Settings > Windows > Application Groups.
  2. Right-click the Application Group you want to delete and click Delete.
  3. If there aren't any Application Rules in the Workstyle using that Application Group, then it is deleted. If there are Application Rules in the Workstyle that reference that Application Group, then you are prompted to check the reference before you continue. If you click Resolve All, then both the Application Group and the Application Rule that references it are deleted from your policy. If you don't want to do this, click Cancel.

Duplicate an Application Group

You can duplicate an Application Group if you need a new Application Group that contains the same applications as an existing Application Group. You can edit a duplicated Application Group independently of the Application Group it was duplicated from.

To duplicate an Application Group:

  1. Navigate to Endpoint Privilege Management Settings > Windows > Application Groups.
  2. Right-click the Application Group you want to duplicate and click Copy.
  3. Select the Application Groups node, right-click, and select Paste. This makes a new copy of the Application Group and all the Application Rules the original Application Group contains.

A new duplicate Application Group with an incremental number in brackets appended to the name is created that you can add applications to.

Rule Precedence

If you add more than one Application Rule or Content Rule to a Workstyle, then entries that are higher in the list have a higher precedence. Once a target matches a rule, no further rules or Workstyles are processed for that target. If a target is able to match more than one Workstyle or rule, then it is important that you order both your Workstyles and rules correctly.

To change the precedence of a rule in a Workstyle:

  1. Expand the relevant Workstyle, and then select the rule type tab: Application, On-Demand, or Content.
  2. Right-click the rule and use the following options to change the rule precedence: Move Top, Move Up, Move Down, and Move Bottom.