Perhaps you want to promote an installer so that it can successfully install an application, but you do not want the application to be able to create files that are automatically approved.
For example, you can allow the installation of Notepad++, but not have scripts created by Notepad++.exe be approved based on this promotion:
-
Operations: Write
-
Actions: Promote process, Don't Promote Children
-
Path or File: *\notepad++.exe
-
Process: Any Process
