topic I want to block commands and special operations that require administrator privileges on Windows. in Cortex XDR Discussions

I want to block commands and special operations that require administrator privileges on Windows.

woody249 — Fri, 05 Dec 2025 01:13:04 GMT

Hi Experts,

As stated in the title, I want to block commands and special operations that require administrator privileges on Windows.

Is this achievable?

Please tell me the necessary configuration method to achieve this (I couldn't find it when I searched, but I'd appreciate any documentation or knowledge pages).

Thank you.

Re: I want to block commands and special operations that require administrator privileges on Windows.

tlmarques — Thu, 04 Dec 2025 11:03:05 GMT

create a bioc with command

Re: I want to block commands and special operations that require administrator privileges on Windows.

woody249 — Tue, 09 Dec 2025 07:20:51 GMT

Dear tlmarques,

I'm relieved to know it can be implemented.
Thank you.