Driver Rules

Driver rules are displayed on the "Rules"->"Drivers" tab.

Overview

Driver rules are applied if an application is about to load a driver. When an application is trying to load a driver for which no rule exists, the user will be prompted to create a permanent or temporary (one time) rule. On attempt to load an updated/modified driver for which an enabling rule exists, SSM will ask user permission to recalculate the rule checksum.

Advanced properties

Configure driver rules

In this window user defines which groups and applications can load the given driver.

Actions for particular group or application in the list:

• "Deny to load" () - the group/application is not allowed to load this driver;
• "Allow to load" () - the group/application is allowed to load this driver;
• "Default" (, and accordingly):
  • for group: the group's action that is set in;
  • for non-group: action, inherited from the group.

Special permissions

Logging tab

Enable logging

If you set then SSM will use settings from "Logging" section in "Options" tab.

Options tab

Protect rule from deletion

Protects rule from deletion: when "Remove rules for non-existent files" is executed, this rule by default is unchecked for deletion.

Don't verify checksum (NOTE: this option is unchecked and disabled for "Checksum rule" object type rules and it is not available for "Driver (folder)" object type rules). Do not perform the driver checksum (MD5 or SHA256) check when the driver is being loading.

Include subfolders (NOTE: only for "Driver (folder)" object type rules)
Specifies whether settings are applied to drivers in the subfolders.