Run Application - Only Allowed Defined Batch/EXE Files (Mail & Deploy Version 2)

Run Application - Only Allowed Defined Batch/EXE Files (Mail & Deploy Version 2)

Applies To: Version 2.1.1.14 or higher

This article explains how to configure Mail & Deploy to allow only specific batch files to be executed using the "Run Application" action. By default, any batch file can be executed unless a whitelist is defined.



Steps to Configure the Application Whitelist:

  1. Edit the Configuration File: Open the file located at:
    C:\Mail & Deploy\Server\Data\Configuration\Settings.xml

  2. Add the Whitelist Entry: Insert the following line into the <Settings> section of the XML file:

    <Setting Category="Security" Name="ApplicationWhiteList" Value="String:C:\Temp\test.bat;C:\Temp\test2.bat;C:\Temp\test3.bat" />
  3. Explanation of the Entry:

    • The ApplicationWhiteList setting allows you to specify which batch files are permitted to execute.

    • Use a semicolon (;) to separate multiple file paths.

  4. Default Behavior:

    • If no ApplicationWhiteList entry is defined (default setting), Mail & Deploy will allow any batch file to be executed.

  5. Save Changes: Save the Settings.xml file after making the edits.

  6. Apply Changes: There is no need to restart the server. The changes will take effect immediately.




Additional Notes:

  • Ensure that the paths specified in the whitelist are accurate and accessible by the server.

  • For enhanced security, restrict permissions on the Settings.xml file to authorized users only.

If you encounter issues or require further assistance, please submit a ticket to the Mail & Deploy support team.