The Foldr server is able to apply specific client settings to client apps on a per user/group basis using App Profiles. App Profiles are available for both Windows and macOS Foldr apps.
When using App Profiles, it is important to consider that any configuration specified on the server will override local settings on the client.
App Profiles could be useful if you needed to apply a specific change to the app for an individual or a group of users, without having to redeploy the client app or push out other client settings to the registry via Group Policy or script.
Windows configurable options
See this KB for specific information around each option
| App Profile |
Value | Client Registry key equivalent |
| config.av.required | Yes or No | RequiresAntivirus |
| config.av.grace | AVGraceMinutes | |
| config.av.update_grace | AVUpdateGraceMinutes | |
| config.bitlocker.required | Yes or No | N/A |
| config.drive_type_removable | Yes or No | DriveTypeRemovable |
| config.process_filtering.enabled | Yes or no | N/A server-side only |
| config.process_filtering.mode | 1 or 0 | 0= blacklist mode 1 = whitelist mode |
| config.process_filtering.processes | enter process names, one per line | N/A server-side only |
| config.ransomware.rename_checking.required | Yes or No | DetectRenameThreat |
| config.ransomware.extension_checking.required | Yes or No | DetectExtensionsThreat |
| config.scripts.mount | N/A | |
| config.scripts.unmount | N/A | |
| config.office_assist.enabled | Yes or No | OfficeAssist |
| config.office_assist.allow_open | Yes or No | OfficeAssistAllowOpen |
| config.offline_files.enabled | Yes or No | UseOfflineFiles |
macOS configurable options
See this KB for specific information around each option
| App Profile Setting |
Value | Client app setting |
| config.filesystem.provider | 1 or 0 1=macFUSE 0=File Provider |
|
| config.gatekeeper.required | 1 or 0 | GATEKEEPER_REQUIRED |
| config.filevault.required | 1 or 0 | FILEVAULT_REQUIRED |
| config.ransomware.rename_checking.required | 1 or 0 | DETECT_RENAME_THREAT |
| config.ransomware.extension_checking.required | 1 or 0 | DETECT_EXTENSIONS_THREAT |
| config.process_filtering.enabled | 1 or 0 | N/A server-side only |
| config.process_filtering.mode | 1 or 0 | 0 = blacklist mode 1 = whitelist mode |
| config.process_filtering.processes | enter process names, one per line | N/A server-side only |
| config.scripts.mount | script as required | N/A server-side only |
| config.scripts.unmount | script as required | N/A server-side only |
| config.office_assist.enabled | Yes or No | USE_OFFICE_ASSIST |
| config.offline_files.enabled | Yes or No | USE_OFFLINE_FILES |
Configuring App Profiles
An App Profile can be created and configured as required and then applied to either everyone or specific users or groups.
In the following example we will create an App Profile for the Marketing department and enforce the client to be using BitLocker encryption and enforce a process filter in blacklist mode so only Windows Explorer, Word and Excel can interact with the drive. You can specify options for both Windows and macOS in the same profile if required.
To create the App Profile navigate to Foldr Settings > Devices & Clients tab > App Profiles.
Click +Add New
Give the profile a suitable name and configure as required.
Next, click the Users & Groups tab
Search for the group or user that you wish to apply the profile. Multiple users or groups may be selected as required.
The profile can optionally be applied to clients based on their location using the ‘On these IPs and subnets‘ field. IP addresses, subnets or network ranges can be specified here, otherwise the profile will apply to all locations. For more information regarding location based permissions and the syntax to configure network addresses, see the following KB article