application control blocks adobe reader background tasks

tb66

Hi there,

the application control logs following blocking action:

Die Anwendungssteuerung hat die Installation einer Anwendung verhindert.
Regelname: Default block rule
Regel-ID: 00000000000000000000000000000000
MSI: C:\WINDOWS\system32{AC76BA86-1031-1033-7760-BC15014EA700}
Name des Unterzeichners:
Übergeordneter Pfad:
Dateibeschreibung:
Dateiversion:
Befehlszeile: .

How can I define an exception because I believe the blocked application is related to Adobe Reader and i have nothing except this msi string?

regards T. Braeuer

Sethu Laks

HI @tb66

Thank you for reaching out to the WithSecure Community,

You’re seeing an Application Control block where the Default block rule prevented an application installation. The log only shows the MSI Product Code:
C:\WINDOWS\system32\{AC76BA86-1031-1033-7760-BC15014EA700} — which likely relates to Adobe Reader.

If you trust this installer, you can create an Application Control exclusion rule to allow it. This requires admin rights in Policy Manager Console or WithSecure Elements Security Center (depending on your setup).

Steps to Allow the MSI Installation:

1. Open your PM management console and go to Settings > Windows > Application Control.
2. Select the target host/domain and edit the relevant profile.
3. Click Add rule → name it (e.g., Allow Adobe Reader MSI Installation).
4. Set Event to Run installation and Action to Allow.
5. Add a condition for the MSI identifier:
   • Attribute: Installer/Product Code
   • Condition: is equal to
   • Value: {AC76BA86-1031-1033-7760-BC15014EA700}
6. Save and distribute the policy.

This ensures the installation is allowed next time, overriding the Default block rule.