Forum Discussion

ThiloL's avatar
ThiloL
New Contributor
6 years ago

AppLocker (GPO) blocks GoToAssist_Corporate_Customer.exe

GoToAssist_Corporate_Customer.exe tries to expand iteself to %TEMP% and run code from there. For security reason this is not allowed (AppLocker). All Programs have to run from "C:\Program Files...".

Does anyone know how to handle this?

  • GlennD's avatar
    GlennD
    6 years ago

    Hi ThiloL 

     

    I believe AppLocker allows you to create exceptions for specific signed applications. You should be able to create an exception to allow the signed GoToAssist software to run while it continues to block everything else.

     

  • AshC's avatar
    AshC
    Retired GoTo Contributor
    6 years ago

    ThiloL If you are referencing the first time client download, then I'm afraid the AppData folder is required to finalize the install:

    C:\Users\(User)\AppData\Local\LogMeIn
    C:\Users\(User)\AppData\Local\Temp\LogMeIn
    C:\Users\(User)\AppData\Local\Temp\LogMeInLogs

     

    • ThiloL's avatar
      ThiloL
      New Contributor
      6 years ago

      This opens a security hole, because from then untrusted code is executable in this folders. Why I cannot preexpand this stuff and place under "c:\program files"?

      • GlennD's avatar
        GlennD
        GoTo Manager
        6 years ago

        Hi ThiloL 

         

        I believe AppLocker allows you to create exceptions for specific signed applications. You should be able to create an exception to allow the signed GoToAssist software to run while it continues to block everything else.