Conditional Application Access for Proximity Template

This template creates a configuration that hides or denies access to applications in the session based on the proximity of the local device to a given position. It can be found in the GEOLOCATION category when filtered for LOCAL platform.

If the local device is not in proximity to a given position, you can choose between two actions:

• Hides applications with FSLogix App Masking based on the proximity to a given position.
• Denies access to applications with Microsoft AppLocker based on the proximity to a given position.

deviceTRUST requires some simple but essential configuration steps to be performed to enable the template for your local environment. We will guide you step-by-step through simple deviceTRUST configuration steps to enable the template within your local environment.

We will perform the following steps:

1. Step 1: Prerequisites
2. Step 2: Contexts
3. Step 3: Actions

Step 1: Prerequisites

If the required deviceTRUST components (Agent, Console and License) are not yet installed, please visit the Getting Started for Local guide and complete step 1 to 4 and then continue here with step 2 below.

Step 2: Contexts

The template has imported the following context:

Context	Description	Customizations
Proximity	Defines the proximity to a given position.	You must update the following context condition with data suitable for your environment: LOCAL - LOCATION POSITION In Range 500 METERS FROM 0,0,… Replace 0,0 with your target position and define the range to the given position on all conditions. Example: 49.8971,8.9258

Step 3: Actions

The template includes an FSLogix App Masking and a Microsoft AppLocker enforcement action that actively controls access to applications, depending on the technology available. By default both actions are disabled.

Action	Description	Default State	Customizations
Proximity - Conditional Application Access - Enforcement - FSLogix App Masking	Hides applications with FSLogix App Masking based on the proximity to a given position.	Deactivated	You must update the following context condition with data suitable for your environment: FSLOGIX APP MASKING Replace ENTER_YOUR_FXA_PATH_HERE with your target .fxa file path on all FSLogix App Masking tasks. Example: %ProgramFiles%\FSLogix\Apps\Rules\NotepadPlusPlus.fxa TERMINATE APP Replace ADD_PROCESS_NAME_X with your target process name on all Terminate App tasks. Example: notepad++.exe
Proximity - Conditional Application Access - Enforcement - Microsoft AppLocker	Denies access to applications with Microsoft AppLocker based on the proximity to a given position.	Deactivated	You must update the following context condition with data suitable for your environment: MICROSOFT APPLOCKER Replace ENTER_YOUR_PATH_HERE with your target configuration on all Microsoft AppLocker tasks. Example: %PROGRAMFILES%\Notepad++\notepad++.exe

Troubleshooting

If your deviceTRUST installation or configuration does not work as expected, you can use the Troubleshooting guide to start troubleshooting.