SHELL command blocked by ASR - Access Developer Forum


	Back to Access Developer Forum Comments List

Upload Images @Reply Bookmark Link Email Next Unseen

SHELL command blocked by ASR

Mark Fairhead

3 years ago

With Windows Defender ASR now blocking SHELL commands to execute BAT, EXE and COM files, is Access now doomed, or is there a way round this.

I use SHELL commands to execute WinSCP scripts to upload and download data via SFTP, but these are now blocked Permission Denied by Windows Defender ASR

Any recommendations greatly received.

Kind regards

Mark

	Alex Hedley @Reply 3 years ago
Is there an official MS Blog post on this?

	Kevin Yip @Reply 3 years ago
I believe only the enterprise version of Windows has ASR (attack surface reduction), and I don't have Windows Enterprise. I would think there should be an option within ASR to allow scripts to execute, since that is such a core function in Windows.

	Richard Rost @Reply 3 years ago
First I've encountered this... And I don't have Enterprise either... Well, there's a starship Enterprise on my bookshelf... But. .

Mark Fairhead OP @Reply

3 years ago

After much research, and in collaboration with several other developers, there doesn't seem to be a way around this ( programmatically ). The only way to resolve this was to persuade the Security Team to add a specific exclusion in the Windows Defender ASR rules , to specifically allow WinSCP.exe ( the exe I needed to use ) to be executed from Access. My Security Team were not keen on doing this, but it appears there is no other option, if you use the Enterprise version of Windows. '. Thanks for your help

This thread is now CLOSED. If you wish to comment, start a NEW discussion in Access Developer Forum.

Next Unseen

New Feature: Comment Live View