Discovery Template Policy Configuration

The Discovery policy contains Workstyles, Application Groups, and Messages to allow the discovery of applications that need administrative privileges to execute. This must be applied to administrator users and includes a pre-configured exclusion group (false positives) maintained by BeyondTrust.

This template policy contains the following configurations:


  • Discovery Workstyle

Application Groups

  • (Default Rule) Any Application
  • (Default Rule) Any UAC Prompts
  • Approved Standard User Apps
  • Allowed Functions & Apps


  • Allow Message (Yes / No)