Software License Monitoring – Deny Products Overview for 8.8
Versions
LANDesk Management Suite 8.8 all SP
Agent Configuration
To block items on the client machines you will need to have the Application blocker setting checked off. Make sure your client machines are using an agent with the "Enable blocking of unauthorized applications" checked off..
Note: Depending on your Version of Landesk, for example if you only have the Security Suite you will not see these options at this time in the Agent. There is a request to add this functionality to all agents regardless of your type of Landesk Installation. You will still have the functionality and you can setup the "Enable blocking" and the "Notify" through the following registry keys:
HKLM\Software\Landesk\ManagementSuite\WinClient\SoftwareMonitoring\ warnWhenAppBlocked would be 1 and watchForApps would be a 1.
Denying an Application
To deny just by an application such as AcroRd32.exe for the Adobe Reader program perform the following steps:
1. Open the console and go to Tools > Reporting / Monitoring > Software License Monitoring
2. Drill down to Inventory > Files > To be scanned
3. Find the product with the “Find:” search box.
4. Right click on the file and choose “Deny use of this file (To Be Denied)
5. Press “Make Available to All Clients”
6. Run inventory scan on machines so they will update the blocked files information.
This will move the executable information to the “To be denied for all devices”. Once an executable is denied all versions, sizes and unknown versions of the executable will be denied.
Denying a Product
To deny just by a product such as the Adobe Reader 5 perform the following steps:
1. Open the console and go to Tools > Reporting / Monitoring > Software License Monitoring
2. Drill down to Product Definitions > All
3. Find the product with the “Find:” search box.
4. Right click on the file and choose “Deny use of this product”
5. Press “Make Available to All Clients”
6. Run inventory scan on machines so they will update the blocked files information.
The product will stay under the All section and will have apepar with a block sign. 
This will deny only this version of the product so if you had Adobe Reader 7 it will still be able to run since you have denied by a product.
Denying by LANDesk Groups
To deny by a LANDesk group lets review making the group.
1. Under Network View > Devices > Public Devices OR My Devices right click and select New Group.
2. Move machines into your group
Now that we have our group setup we can add products to deny that will only affect the devices listed in the LandeskGroup1.
1. Open the console and go to Tools > Reporting / Monitoring > Software License Monitoring
2. Drill down to Product Definitions > All
3. Find the product with the “Find:” search box.
4. Right click on the file and choose “Deny use of this product by LANDesk Group”
5. Go to Denied products by Landesk Group in the menu and right click on “Select Landesk group”
6. Highlight the group to deny and click on the Deny button.
7. Press “Make Available to All Clients”
8. Run inventory scan on machines so they will update the blocked files information.
Now any devices in the selected group will be denied to launch this product.
Denying by Active Directory Groups
Note: When adding an Active Directory Group the denied product will only be denied by Computer, not User.
First we must gather the Active Directory Information.
1. Open the console and go to Tools > Reporting / Monitoring > Software License Monitoring
2. Click on the icon for Login to Active Directory and enter your credientials.
3. Click on the icon to schedule and update for active directory information.
4. Completed gathering Active Directory Information.
Now we can deny a product by Active Directory Group
1. Open the console and go to Tools > Reporting / Monitoring > Software License Monitoring
2. Drill down to Product Definitions > All
3. Find the product with the “Find:” search box.
4. Right click on the file and choose “Deny use of this product by AD Group”
5. Go to Denied products by Landesk Group in the menu and right click on “Select Active Directory group”
6. Highlight the Computers to deny and click on the Deny button. (You can only deny computers, not users. Selecting a user will not deny the product and it will be able to launch.)
7. Press “Make Available to All Clients”
8. Run inventory scan on machines so they will update the blocked files information.
